Another project breach raises significant questions, Fedora considers dropping Snaps in Gnome Software, and has the ISPA let Mozilla off the hook?