I don't think that's relevant to this discussion though, as open- and closed-source subversion would seem to follow really different paths. - Open-source subve

I don't think that's relevant to this discussion though, as open- and closed-source subversion would seem to follow really different paths. - Open-source subversion has the big advantage of having the code, testing and build processes in the open which allows for the attack surface to be exhaustively studied, whereas closed source requires code exfil, reverse engineering, inside intel on processes etc. - Closed-source subversion can hide in other places -- binaries can be corrupted on a compromised server etc. Seeking to influence the code-based development seems like the hardest road IMO. - Open-source maintenance (at least the kind under discussion here) stops at the maintainer, whereas most corporate dev is in a hierarchy with non-uniform commit authority. None of the same social techniques would apply.