Fair enough. Of course, projects with few retainers will likely not have near as many eyeballs looking over the code base. I do see your point, however, in a se

Fair enough. Of course, projects with few retainers will likely not have near as many eyeballs looking over the code base. I do see your point, however, in a sense nothing has really changed. Although the job of maintaining a FOSS codebase may very well become just a bit more tedious. But yes, Ken Thompson's "Trusting Trust" principles do seem to address the issue quite well. When it comes to code review, always be diligent!