From: wrar@debian.org 
  
 On Mon, Aug 18, 2025 at 08:19:49PM +0200, Alexandre Detiste wrote: 
 >Worst case scenario is when the guy submitting the 3 PR is the XZ hacker. 
 > 
 >That _did_ happened: 
 >https://salsa.debian.org/games-team/empire/-/merge_requests/1 
 >https://salsa.debian.org/games-team/empire/-/merge_requests/2 
 >https://news.ycombinator.com/item?id=39868390 
 > 
 >So MR for pristine-tar & upstream branch are too big to review and 
 >can never be trusted if they are from newcomers. 
  
 Same for master, as that one includes upstream changes. 
 In any case it wouldn't make correct tags and maybe even wouldn't make 
 correct merges. 
  
 -- 
 WBR, wRAR 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmijciAtFIAAAAAAFQAP 
 cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh 
 zVwP/1ixctbyYDIowP4KouW/722wefUpHUwDjOpFWu7oMxrL2MSzqdIjcr+DVywR 
 2LpMCKhjprMEfy6D4z6bcmbAlO1eCZy4kMNQyEHChbluD/fGGo4CTLiDh4g739T9 
 ZNCx4xxsjbs2k+qtvOdbMaKTMxFl17Ax5Zsy39Y5ABqHn5c4xzr/jaQ2L9wr9M+J 
 WviE7zQmO3q4a6z82o006D/debZ9kDA4ag8+TteMMQ+cSm3HaWi7udWaQKJhiULW 
 pUbAX6W4EVIwEHHotio3fAlAWHuT4GkDqGL2r1NOPVqbbV0O43GUNskqLdz38vAS 
 R1dKquwkxK1BWlkr4pbg8KO2RCqyyymxlpPSr9b2psmvROlU1mLa/b0WLpSih8Ii 
 oegjXcrkVMaqoNVHlsw8wKR2Z6D/JmrH83egME1JDgFD8G6Zc080ZavWUN/Q5dAv 
 BvwIv/ZGVXF6bACQBgoN2jdQbyVKX8mU+Ksk1SDSZXO7tANgHvOCfEUOkd63hUq8 
 L9oxHRUcgOwXLFIKVChqWLpcSOVL/631wCMQnFCVj0IfV1jixou1nPoUubtOZ9/s 
 cii4scOAqb6vyBGIV/x2vCv6Kf/EJ5TKEzekPd08Ji5Pb/Jgo+7DzWKmEJf3gSIP 
 1ceoC5NKvnwArDPoRpsTn5K37Djx5xr87s+3ppN0zTSZLnX8 
 =h6n6 
 -----END PGP SIGNATURE----- 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)