In the mean time, my very real vulnerability reports are not even acknowledged because maintainers are busy handling this kind of nonsense.