[yocto] how does one stay on top of YP security alerts?

[Bent Bisballe Nyeng]

On 01/09/2017 02:12 PM, Alexander Kanavin wrote:
> On 01/07/2017 05:29 PM, Robert P. J. Day wrote:
>>   colleague wants to know how one stays up to date with security
>> alerts related to YP releases, i checked out the yocto-security
>> mailing list:
>>
>> https://lists.yoctoproject.org/pipermail/yocto-security/
>>
>> but that looks like a very dead mailing list. are there other options?
> You can subscribe to yocto-announce list and follow the announcements 
> for stable point releases, or simply pull from release branches as often 
> as possible, and make some form of 'git log' your personal security alert.
>
> Alex
>
So /is/ the yocto-security mailinglist considered "dead"? Or has there
simply not been any security issues for a while?

Kind regards
Bent Bisballe Nyeng