Your comment assumes that security issues are only discovered because someone do...

		aoeusnth1 30 days ago \| parent \| context \| favorite \| on: We should all be using dependency cooldowns Your comment assumes that security issues are only discovered because someone downloads the package. This premise is incorrect.