[greggsy]

It’s not practical to subscribe to security feeds for every OSS project. Keeping in touch with the tech community is a valid alternative, in combination with patching best practice.

[jrootabega]

It's not wise to subscribe to none.