Just updated my openwrt firmware yesterday. I was a minor point release behind but I'm no longer risking it.

What if they poisoned the repository and pulled a Jia Tan where only new versions were affected?

Now you don't know what the hell to do.