Agreed. But this depends on (at least) 1 condition: that no new bugs are introduced. FLOSS projects keep moving forward, and it seems some project's maintainer

Agreed. But this depends on (at least) 1 condition: that no new bugs are introduced. FLOSS projects keep moving forward, and it seems some project's maintainers are being swamped by PRs (some good, some bad). Whatever allows random 3rd party to 'strip-mine' existing codebases for bugs, should also be applied to new code.