Perhaps he should read a full article about the bystander effect. I wonder how many people actually audit open source code (or even take any action further than

Perhaps he should read a full article about the bystander effect. I wonder how many people actually audit open source code (or even take any action further than just not using it if they find something odd).