Also I learned that it means nothing when I hear "it is open source and peer reviewed". I get his point, but I take exactly the other conclusion from this; per

Also I learned that it means nothing when I hear "it is open source and peer reviewed". I get his point, but I take exactly the other conclusion from this; perhaps ironically, because Steve Thomas has ripped it to pieces and gone to town on the code, as long as the flaws he found are fixed, I now have greater faith in it because it's open source and peer reviewed - Steve Thomas' own peer review is a big part of that. Perhaps we should take open source and peer reviewed as meaning it can be peer reviewed; it's still on us to check who's done those reviews and, if needs be, do it ourselves and give something back.