[reitzensteinm]

This is a bit of a strawman. It absolutely is your responsibility, but that doesn't mean you can't outsource it.

[Y7ZCQtNo39]

It's the kind of thing where, if everyone with this problem chipped in $5/month, we could have a central repository of vulnerabilities. So, not absolving yourself of responsibility, but also way more efficient to outsource.