On Fri, Oct 23, 2026 at 05:50:45PM +0200, amindfv--- via ghc-devs wrote:
I think it's the same old open source story: many, many people use Kazu's software for mission-critical work, but very few people have contributed back to its development. I know of many private companies that could really be in trouble if Kazu's code had security flaws, yet when critical bugs are discovered, I'm not aware of much industrial urgency to fix them. The assumption is that Kazu or another developer (or an LLM) will fix them for free.
I've been one of the intermittent contributors to and reviewers of Kazu's work on, e.g., "crypton", "dns", "iproute", "network" and "tls". Most recently I've reviewed some of Kazu's substantially Claude-assisted work on "crypton". The involvement of an LLM in that effort did not get in the way of review, and the proposed changes were timely and important. I, for one, am glad that with Claude's assistance Kazu was able to take on and complete some more ambitious projects. Yes, one should ideally find meaningful independent review for such work, and to avoid merging code that is unclear (frustrates adequate review). -- Viktor. 🇺🇦 Слава Україні!