ror_ecommerce had its first security announcement. Once this announcement became public, I have become very concerned about how to make these announcements and think the community needs to find a better way.