Re:Operation Rosehub – patching thousands of open-source pro...
by therealdrag0 on Thursday March 02, 2017 @02:02PM
(#13777105)
Probably v3.2.2 was lower hanging fruit for most projects. Instead of having to make code changes.
Interesting that 2100 of the PRs are "Upgrade Apache Commons Collections to v3.2.2" and just 7 were "Upgrade Apache Commons Collections to v4.1".