Hi > I wished the respective report would have been sent to the upstream > developers, > not to Debian. We could have been a second resort when upstream does not > react to the reports (not unlikely, admittedly). Now, the Debian maintainer > sees the findings two weeks before the bug is made public. I do not feel this > to be right.
I agree with you that it would have been best to contact upstream developers instead of package maintainers. I couldn't find a tool listing upstream developers for a given package however, and that's why we contacted package maintainers instead. Thanks, Alex -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAF1AS2gDiJKUr3-GVX8gF9jKyw-VQtRmM0Y000eny=1rbw4...@mail.gmail.com
