Liran Tal:

How do you cope with the issues of libraries having security vulnerabilities but there’s no fix yet? With open source packages this might even be more apparent than ever. Maintainers are rightfully not in any contract to provide you support, yet you rely on third-party software by volunteers.

In this piece I want to show you how we’ve adopted surgical patches to help remove this burden and risk from users.