@gregkh @TheNewStack @badger @sjvn
Working to fix the CVE problems should be applauded
But we need to keep in mind there are open source projects that are one person who spends two hours every other Saturday
Expecting that person to become a CNA is 🍌
They should be able to control their CVE data also, but today they can't