according to Oliver Chang and Kim Lewandowski from the Google Security Team in a blog post. It’s also very time consuming for maintainers to find out which versions were affected and to track ...