Good question was asked by debian devs: what's the future for xz now? I feel it is not really worth it to vet 2 years' worth of changes by a malicious actor, w

Good question was asked by debian devs: what's the future for xz now? I feel it is not really worth it to vet 2 years' worth of changes by a malicious actor, who had been actively trying to make any exploits add by them as hard to discover as possible, when good alternatives, like zstd, exist.