alt Hacker NewsThis works until you consider regular security vulnerability patching (which we have compliance/contractual obligations for).
This works until you consider regular security vulnerability patching (which we have compliance/contractual obligations for).
This only makes sense for vulnerabilities that can actually be exploited in your particular use-case and configuration of the library. A lot of vulns might be just noise and not exploitable so no need to patch.