On: Backdoor in upstream xz/liblzma leading to SSH server compromise

[msm_]

>and I don't want amateur contributors.

And you're free to not accept amateur contributions to the OS projects you maintain. Hell, you can require security clearance for your contributors right now, if you want.

[zeroCalories → msm_]

Software like that already exists. I'm saying open source should do better.