Drupal's security surge needs reviewers and release capacity Drupal reports 256 advisories in five months. Its funded team worked on 223, while a deliberately limited triage bot helped sort reports without taking over security decisions.