Stuff I already wrote that other people might be open to reading this week, because of the #xz incident:

https://www.harihareswara.net/posts/2021/sidestepping-the-pr-bottleneck-four-non-dev-ways-to-support-your-upstreams/ Four Non-Dev Ways To Support Your Upstreams (Pass this along to executives who are asking "how can we prevent this in our dependencies?")

https://www.harihareswara.net/posts/2023/user-support-equanimity-potential-cross-project-tools-practices-open-source/ Potential cross-project #opensource tools and practices that you/we can implement to help lighten the load on each other

1/n