> Imagine a backdoor planted by a Russian asset. Email-based filtering of maintainers is not even close to what could be considered adequate security measures.

> Imagine a backdoor planted by a Russian asset. Email-based filtering of maintainers is not even close to what could be considered adequate security measures. In fact, when CISO or OSS starts caring about the optics, it’s a red flag.