You're telling attackers they're on a shot clock. One announcement is enough to prevent panic then go do the work and patch the bugs. They're tweeting that over 99% of the repos scanned are vulnerable...
Yeah maybe not fully exposing the state of the vulnerabilities js the more intelligent route nevertheless I feel there's good behind this coming together and collective response to secure the field. Worth voicing your concern and worth for those involved and blasting out over the megaphone to examine and reevaluate too.
2
