Modern operating systems, such as Red Hat Linux, Apple macOS, Ubuntu Linux, and Microsoft Windows, frequently distribute patches, and some application and utility software developers also distribute patches for their products. However, the number of developers that distribute patches is relatively small when compared to those that do not. Many programs and apps are "orphans" and never receive any patches or security updates.

+Should programs and applications be required to provide security updates for a specific period of time after the program is released?