Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat

We bucketed every advisory in OSV.dev's public per-ecosystem archives by its record-publication year...