@swelljoe I am worried that this now leads to more problems for 'Lone Wolf' projects. People won't let other people in because of fear, burning out sooner.

What we need is actually the contrary. More eyes looking on code. Put, the burden on more shoulders. Let other committers in *early* in a project lifecycle. I presume that *most* people don't have ill intent. Even if something bad happens it can be found and fixed *when enough people looking at the code*.

@cehteh I mean, nothing is good about this situation. We were reminded of lots of worrying things about the OSS ecosystem.

I don't think it's anything new, though. I mean, we didn't learn about this vector of attack from this event, we knew it was possible (likely, inevitable, even). And, we're kind of preaching to the choir in saying this isn't a sustainable or healthy way to make software. But, the solutions require sustained support at a scale that's not possible for small projects.