We've adopted a zero-risk posture at our org. We've taken down numerous amounts of services over the last few weeks related to PHP, Node, and Python until things are properly vetted.

We joked in our last internal meeting that this is the end of public software... I have a feeling we may be right, at least in the very short term.