Yeah accurate. I got a few node projects and more rust projects. The few node projects get more security vulnerability than the rust ones. And most time it's just OpenSSL and rustls, which is kinda expected from such important packages