Quillpad is looking for new maintainers
erAck, 
This is how one attracts and invites Jia Tan and Hans Jansen types.
jackpot, 
this isnt worth the time, it’s not a dependency of a huge piece of software
erAck, Malicious account holders with a long term goal need to build reputation. It doesn’t matter much that such an app isn’t a dependency of other software.
steeznson, Practically every FOSS project is actively looking for volunteers/maintainers all of the time. More contributors are not problematic.
The xz problem was that they socially engineered the main dev into giving them the keys to the kingdom.
erAck, Making one a maintainer (with merge and possibly even direct commit/push permissions) is handing them a key to the kingdom. Recruiting a maintainer out of the blue without them being already contributor and long term participant in the project is questionable.
steeznson, I believe that the bad actor was a contributor for several years before becoming a maintainer
erAck, Apparently not, you can check commits in git.tukaani.org/?p=xz.git;a=summary the first authored commit was 2022-01-28, then long time nothing until 2022-06-10, the first merge as committer was 2022-12-16.
steeznson, Interesting! I’d not realised it was so recent
Vigilante, Is Hans you are refering to the guy on fdroid or someone else ?
erAck, Of the xz/liblzma backdoor incident.
Vigilante, Oh i only remembered jia tan so thought it was fdroid one.
uninvitedguest, 
I’m glad they’re looking. I quite like Quillpad, it works nicely with my simple set up.
Add comment