@glindsey @thomasfuchs

I wonder if people who are forking it are making enhancements or fixing bugs and Twitter are using those efforts to fix their bugs in prod.

I also wonder if Twitter is trying to hire people who do that sort of thing.

God, came up with a novel supply chain attack: We copied code from someone who patched a bug in the code we published but it turned out to be poorly crafted/intentionally buggy.

We can't demand that they fix it because we didn't get permission to use it.