I commented in my personal capacity on NIST’s plans to modernize the NVD. My concern: can small NGOs with no security team figure out if they’re affected, what to do, and without expensive tooling or epic triage/review work? https://www.regulations.gov/comment/NIST-2026-0100-0133