I don’t have any clear conclusion following the xz hack. Crux of the problem are: software complexity, huge chains of dependency, general lack of dev time to do things well. Both closed-sources and OSS seem equally vulnerable tbh.
Always been stubbornly picky with merging PRs, scrutinizing every bits, because I want protect software quality above all. I can relate to the pressure maintainers may feel when it comes to merge features that are actually out of their understanding. I try not to.
@ocornut More you provide, more the people demand :)
It is kindof crazy how dearimgui became a goto library for almost every studio. And how “expected” is that you keep doing all development, communication and guard security.
Add comment