2) https://github.com/fincham/piecework <-- a reporting tool on whether hosts are "up to date" with Debian and Ubuntu advisories