thats your concern as a dev sending a patch to your repo., your IDE doesn't "address" attacks.

The same as everyone else; ignoring it and hope it goes away

Curious: what would, should, or could they be doing?