GitHub Says Vulnerabilities in Some Ecosystems Take Years to Fix

The report, which is based on the analysis of more than 45,000 active repositories, shows that it typically takes 7 years to address vulnerabilities in Ruby, while those in npm are usually patched in five years.