It's unclear to me what this module does from the project summary. Is it something needed in Drupal 8?

I've heard it allows for folks to document why a security update might not be applied.

You don't get that from reading the project summary.

Comments

mgifford created an issue.