Good points but you should give dandarkpill credit who made it on twitter.

Yeah just look at the xz lib supply chain attack that happened recently.

Something like that probably happens all the time with nation-state actors inserting subtle vulnerabilities into open source software.

Go to any major lib GitHub and look at how many PRs get merged with superficial or even seemingly no review.

FreeBSD 🤙

Agreed, we need to handle that scenario better. Thanks for the feedback!

Agreed, we need to handle that scenario better. Thanks for the feedback!

THE FIRST PART IS TRUE BUT I WILL NEVER USE TWITTER AGAIN.