@campuscodi the idea was "with many eyeballs, all bugs will be shallow"
Turns out "if your entire release process is public *and* pull requests allow anonymous entities to run their code through that middle process – all projects are 0wnable
Turns out "if your entire release process is public *and* pull requests allow anonymous entities to run their code through that middle process – all projects are 0wnable