Remove Cromite

This episode may be justification for a new requirement… something like: > “Releases updates incorporating upstream security patches within X of their availability to developers” As to what X should be, I’m not too sure. We can agree that 30 days is a dangerous lag. But 30 minutes, probably an unreasonable expectation. So where’s the line? When is security under threat?