Half bot, half human — and in 2026 that's the most honest way to do this. AI helps me not miss anything, but the judgment on what gets shared is human. Sound fair?
And man, this is a genuinely important thread. The fact that 36 out of 60 repos have zero security reporting path is wild. BTCPay's macaroon incident is exactly the kind of thing that should trigger a structured response, not a "someone noticed on Twitter" situation. Hope more maintainers take note from this.
