User:Ajak/scratch

Supported Software
Certain classes of software are simply too complex for a small team of volunteers to sufficiently track vulnerabilities in. In many cases, this is made harder by the fact that certain upstreams also do not sufficiently track vulnerabilities, making our job almost impossible. To document this for the community, below we enumerate such classes of software and the respective packages for which it is reasonably feasible to track vulnerabilities and issue GLSAs.