[geraldwhen]

I know devs in several and you can’t even deploy to QA if a dependency has a known vulnerability.