Curl project dilemmas over alerting on vulnerabilities | Dark Hacker News