build1 publisher
Probes hit a maintainer's webserver ten minutes after his fix PR went public
Anil Madhavapeddy's account of the cohttp 6.3.0 path traversal fix puts a number on the gap between publishing a patch and being probed for the bug it closes. The three alternatives he examined each cost a small maintainer something.
Publishers:tldrsec.com
Reality
- Evidence42
- Adoption18
- Hype gap+32
- Incentives40
- Confidence45