3 ms·
If you don't trust the project to communicate its own vulnerabilities why would you trust the project's secure coding and vulnerability management practices? I
by kevincox 3y ago
If you don't trust the project to communicate its own vulnerabilities why would you trust the project's secure coding and vulnerability management practices?
If you do trust the project then why add another source of trust?