Originally published on endoflife.ai.
An end-of-life date is a deadline. On one side of it, your software receives security patches. On the other side, it does not — permanently. Every vulnerability discovered after that date is disclosed publicly, assigned a CVE, and frequently weaponized, with no fix ever coming from the vendor. This is the CVE blind spot, and it's the single most predictable security risk in any stack: you always know the exact day it begins.
And yet EOL dates slip past almost everyone. They don't trigger a scanner alert. They don't open a ticket. They aren't on anyone's sprint board. They are, quite literally, calendar events that nobody put on the calendar.
We just fixed that last part.
Add to Calendar, on every page
