Every runtime and piece of middleware you run has a quiet expiry date. PHP 8.0

went EOL in late 2023. Node 16 in 2023. Postgres 12 in 2024. After that: no

security patches. The problem is never "we didn't know EOL was a thing" — it's that

the EOL calendar lives in a dozen vendor pages and nobody checks them until an

auditor does.