{ "_comment": [ "Advisories reviewed and accepted, with the reason and the date.", "This is a RECORD, not a mute button: an entry says somebody looked at", "the advisory and worked out why it does not apply here. Anyone can", "re-read the reason and disagree.", "", "An entry needs an id, a reason that names the precondition that is", "absent, who accepted it, and when. 'reviewuntil' is when the reasoning", "should be checked again - a reason stops being true when the code that", "made it true changes, and 'invalidatedby' should say what that change", "would be.", "", "Currently EMPTY, which is the state to aim for. The one entry this file", "has held so far - a PyJWT algorithm-confusion advisory that needed a", "configuration this application does not use - was removed by upgrading", "PyJWT rather than by keeping the exception.", "", "Do NOT add an entry to make a build pass. Upgrading the dependency is", "almost always cheaper than defending a decision to skip it." ], "accepted": [] }