> The pull request model is fine for open source development, but it’s been a move backwards for internal development The more paranoid would claim that requir

> The pull request model is fine for open source development, but it’s been a move backwards for internal development The more paranoid would claim that requiring PRs that then require approvals prevents a malicious engineer from adding an obvious back door to the code. You would hope you can trust your co-workers, but sometimes a hack is an inside job.