To be even more explicit on the last point, that means regularly updating OpenWRT and all your containers, not just the server’s base OS

deleted by creator

They did. Here. Now.

Notify the maintainer of the open source tool - they’re in the best position to push for compliance. They have the power to revoke the company’s license.

And not subject to compliance based retention standards