No need to be alarmed (or sad.) Without some real-world context for each project, we just can't say whether the code we're looking at represents a real securit

No need to be alarmed (or sad.) Without some real-world context for each project, we just can't say whether the code we're looking at represents a real security problem. I'm certain that github hosts just as many one-off, let-me-scratch-some-code-together-that-I'll-never-use-again type projects as it does hard core, production quality ones. That said it's a neat technique for quickly auditing code. Someone should now write an automated tool for submitting security patches to all of these projects.