> and I'm not sure what we're supposed to learn from it. Commit your dependencies and be lazy to keep them up to date, but scan for vulnerabilities. It's far l

> and I'm not sure what we're supposed to learn from it. Commit your dependencies and be lazy to keep them up to date, but scan for vulnerabilities. It's far less likely you'd be hit with a 0-day attack than a broad attack (or bug) like this one.