This reminds me of that time there was a critical vulnerability in some core open source library that basically everyone depends on, and there was no one around to fix it or something. I want to say it was 2015? I can’t remember the name of the software package.