static

xz was successful because it was believable, but a malicious actor would more likely target libraries that are depended on by many, like xz.

I appeciate all you do, but please start delegating for your own sake.
Find people to handle the spam and moderation, that gives you more time to focus on dev and infra.
And on dev too, there is lots to delegate.