... next month...
Me: "Dear maintainer, can you please bump package XY?"
Maintainer: ...furiously starts looking into the git diff looking for a backdoor.
@okias@floss.social Please also check the diff of the tar balls. After all the code to activate the exploit was hidden there. :)
@okias past two years already tbh, just no looking at diffs but telling them to fuck off