← Back to context

Comment by kleton

3 days ago

There are hundreds of PRs fixing valid issues to your github repo seemingly in limbo for weeks. What is the maintainer state over there?

2 comments

kleton

Reply
michh  3 days ago

increasing the (social) pressure on maintainers to get PRs merged seems like the last thing you should be doing in light of preventing malicious code ending up in dependencies like this

i'd much rather see a million open PRs than a single malicious PR sneak through due to lack of thorough review.

zparky  3 days ago

Not really the time for that. There's also PRs being merged every hour of the day.