Is that because they don’t use a bot to auto-close issues like a lot of other projects?
I see this way of thinking around CVEs too. I think it’s a mistake of making data-driven decisions based on noise rather than signals. It sounds good when you have a comparative number to go on.