Page History

...

If you have verified the issue does not impact the project, it would be appreciated to share this analysis through the projectsproject's public channels.

If you have not done any analysis on whether the advisory for the dependency impacts the project, you can consult the projects' public channels, such as their issue tracker or public mailinglists, to find out if anyone else has done any research into this advisory. If not, you may open a public issue or discussion on the mailinglist. Contributions upgrading the dependency to a version that is not affected by the problem are also generally welcomed.

...