> thousands of modules may be vulnerable (emphasis mine) Apparently any module that uses eval or exec counts in "may", regardless of whether there's an actual

> thousands of modules may be vulnerable (emphasis mine) Apparently any module that uses eval or exec counts in "may", regardless of whether there's an actual vulnerability. Then using dependency analysis they extrapolate the 3% of packages that actually use these features to 20% that depend on something that use them. Maybe uses of eval or exec should be more closely audited for safety, but blanket stating that any use of core language features makes you vulnerable is just vacuous clickbait. This is a Synode sales pitch.