Hacker News Reader

Agreed, but working out which are needed and which are safe often takes more time than simply rolling with the new release

This way you do not run software with less security issues, just software with not-yet-discovered ones.

Create a GitHub native tools suite for LTS management of all releases of all languages/platforms, then we are talking about security.

Yes, the tradeoff to get better security is more effort and more process.

In all the years since it was rolled out, I’ve seen hundreds of security warnings but absolutely none was remotely close to a real security issue.