[OSTIF](https://ostif.org/) is conducting an Audit for Express.js. This issue is used to track the public discussion around it.