[laughs] Um, for those of us or, you know, the audience that might not know you, you wanna just give, like, a brief, like, 30-second introduction?

Sure, yeah.

So my name's Peter Ulrich, which is the German way of pronouncing things, but nobody can do that, so everyone calls me Peter Urick.

Um, I'm from Germany.

I live in the Netherlands, uh, also partially in Portugal because my fiance is Portuguese.

Uh, I'm a, I don't know, senior staff, whatever, Elixir developer.

Um, yeah, I've been working with Elixir for s- eight, seven, eight years now.

[laughs]

Where's, which next library do I need to update," right? Uh, can you kind of talk about, you know, how, your process of how you chose which, which library to scan? Were you expecting there to be another vulnerability? Uh, talk more about this.

Yeah, of course.

So first of all, also my apologies.

Uh, uh, but also I'm in the same boat, so whenever there's a CSV release for a library, I also have projects that most likely rely on them, and I have to update all the libraries myself as well.

And yeah, I think the reason that there were so many CVEs of library, libraries that everyone uses is because I started at the top of Hex PM most downloaded libraries.

And then you get Decimal, you get Bandit, you get Phoenix, uh, Postgres, these kind of things.

So that's also, you know, when I, I found those first, and now I'm actually much further down the, the line, and I, I still find a lot of vulnerabilities.

What does it look like from your end, you know? Is there a version of your work which is harder to do because of the receiving infrastructure, you know, and because of the fact that it's, you know, volunteer-staffed and-