> Fine, then let's adopt a standard of announcing whether you're serious about your projects

I don't believe in Tidelift myself nor I actually pay them any money, but there's that already.

If you're willing to use less recent packets, you can trust vendors like SUSE or Red Hat to do that for you.