> This project provides an easy way to receive only important security commits I wonder if this is actually possible, given that a refactoring or code cleanup

> This project provides an easy way to receive only important security commits I wonder if this is actually possible, given that a refactoring or code cleanup could also remove lots of security issues (which in part aren't even known today). This point is quite well articulated by the OpenBSD security folks, for example: http://www.tedunangst.com/flak/post/long-term-support-considered-harmful http://www.tedunangst.com/flak/post/long-term-support-consid...