@dalias @mdfranz @alecmuffett @dave_aitel At the same time, something as critical as OpenSSH ought to pass code audits, you don't need to write things yourself to assert them as good, although you'll probably end up writing patches or submitting bug reports.
Meanwhile the ocean smells without much inspection.