[development] RFC: drupal as a moving target

[Alan Pritt]

On 28 Apr 2008, at 15:57, catch wrote:

> [...] there's clearly non-trivial resources involved in 12 months  
> additional
> maintenance of a core release.

Can anyone estimate what security only (no other bug fixes) support  
would cost
in man hours?

And prior to answering that question, we would also need to decide how  
this
would affect security policy for contributed modules on those core  
versions.