I'd like to forward a list of out of date, linked dependencies that contain vulnerabilities. The list includes the "fixed version" of the dependent code. Can I email this list to the repository maintainers?