Update the vulnerable direct dependencies in their code base following the recommendations of SECCOM documented in Istanbul Holmes.

Identify resource constraints to SECCOM by 17 June (M2).

Submit a LF Ticket for access to the Security Vulnerabilities space.