But I haven’t.

So let’s work off of that - expecting the entire internet to read the personal blogs of open source contributors before deciding which packages or modules to run is…not really a solution to the problem you’re putting forward.

Is it?