[puquesnrn]

yes it does. There’s only one contributor for most of it and you can click to see his profile.

With the source code available and the primary contributor clear, what more could anyone want? Certainly it’s a bit much for one to ask for a security audit they themselves won’t do

[aflukasz]

> With the source code available and the primary contributor clear, what more could anyone want?

Reproducible builds. :)

[dangus]

How hard is it to make a GitHub profile?

If I am a developer using podman/Docker to build my PHP images, am I expected to understand code written in Go?

These are all acceptable risks until someone is asking me to disable SIP.