#Automatic Updates Initiative

See discussion in ✨ Add Alpha level Experimental Automatic Updates module Needs work . The core thing is going to be called update_manager, not auto_updates.

I believe "Project Browser" is also already set. I haven't seen any interest in trying to rename that.

package_manager seems to already be resolved, and is already in core as an experimental module, and is what both

Tempted to close this as either duplicate or outdated, since I believe all the decisions have already been made.

Made a start, needs some tests, should use DI too.

In a discussion on the original MR @tedbow pointed out that \Drupal\system\SecurityAdvisories\SecurityAdvisoriesFetcher::getSecurityAdvisories is called with $allow_outgoing_request = FALSE in hook_page_top. When it's called from hook_cron and hook_requirements this param is TRUE.

If I understand correctly, @catch originally suggested we add flood control to system_cron, but in light of the above I think we can put it in ::getSecurityAdvisories when the bool is TRUE.