I'm concerned if we have a solid approach for tracking the vulnerability issues? As dreact is one of the major dependencies on my project, I want all the security concerns to be fixed once relatively quickly.