57
The XZ Utils backdoor is a symptom of a larger problem
(ariadne.space)
I thought this was a really good point regarding situations where a github issue or other channel of communication is being used to pester or make demands of a maintainer. I hadn't thought about it from this perspective.
Let the maintainer deal with it publicly, and reach out privately if you are concerned about the situation. Otherwise, even if you are concerned about burnout or the maintainer overworking, you may wind up advocating for a threat actor to become a maintainer of something.