For HDX and other IT components operated by the Data Services Section, we will apply all security updates within 30 days of release, unless there are extenuating circumstances that prevent the update. In the case of extenuating circumstances, we will log each case in the table below, along with the reason, anticipated risks, and actions we're taking to mitigate those risks.
| Component | Frozen version | Reason | Known risks | Risk mitigation |
|---|---|---|---|---|
| NodeJS | (TODO) | (TODO: GIS stack) | (TODO) | (TODO) |