CVE-2019-5018: currently affects macOS and Windows, but we hope to switch the deps to the source layer (which is using a more up to date sqlite version)