• Open Vendors to check and read each official page; set Last checked to today
• Add a notice for anything that touches you, even without a date
• Add a vendor whenever a new dependency enters a system
• Check that the address receiving vendor e-mail still reaches a person