Good. There’s so much chain of trust in the OSS community that it’s hard to keep up with the tens of thousands of libraries that literally hold up the Internet.
It’s a shame we discover these critical bugs so late in the process, but at least we discover them at all…