@bagder @loke oh gosh, compliance and security gone wrong... "vouch that you'll provide a patched version of your software for any CVE that has a patch available within n time"... but I'm an OSS engineer and have no contract with you, I'll vouch nothing without a contract.