@ddr @ramsey It's not always so easy.

The patches WERE toward a goal we already had (support for next PHP version).

But the outsourced devs were largely unresponsive, and in some cases shared an account, which made communication difficult. In many cases, we ended up closing the request and authoring new ones.

But reviewing meant we lost time we could have spent elsewhere. That's another issue with the "supply chain" mentality - while we can ignore requests, we still spend time evaluating.