The thread shows how supply chain attacks are difficult with Debian: random people cannot really contribute to something like Apache 2 because they need to be s

The thread shows how supply chain attacks are difficult with Debian: random people cannot really contribute to something like Apache 2 because they need to be sponsored by a Debian developer and they are being asked to do "boring" stuff before that, like triaging bugs and fixing them. The RFH is mostly here to get more people involved, by the maintenance of Apache2 in Debian is going well and the latest version is currently packaged: https://tracker.debian.org/pkg/apache2 https://tracker.debian.org/pkg/apache2.