Sponsored:

Browsing without a VPN is like mailing your passwords on a postcard. Hackers, advertisers, and your ISP are tracking every click.
PureVPN wraps your data in military-grade encryption, making you completely invisible to snoops while unlocking restricted content worldwide. Don’t leave your digital life exposed for another second.
Reclaim your online privacy. Click here to secure your connection now!
Author:
Source
Drupal no longer releases a new version of Core when an upstream dependency fixes a security vulnerability. It is the responsibility of site maintainers to keep track of security advisories for all such dependent libraries. That is no small task, and a way to automate this is needed. This post looks into how this can be done.