Technically yes, in practice you have 1 or 2 yrs at most.
During this time, most pieces of software, especially specialized ones, will have on average 0-10 people look at it. Out of these, approximately 0.01 will report any issues.
The biggest and most secured OSS projects are corporate backed with many companies having a vested interest in its security, not a medium sized company or random person dumping their code on GH
semisol
npub122…cgrkj
2026-06-22 17:19:35 UTC
in reply to nevent1q…fl3j
Author Public Key
npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkjPublished at
2026-06-22 17:19:35 UTCEvent JSON
{
"id": "a445c0fab51337941ff08e05a01e3f2a9f7f6ed5b84562b6ef186f7613fa7169",
"pubkey": "52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd",
"created_at": 1782148775,
"kind": 1,
"tags": [
[
"e",
"cfbd56e5660253d159e4fd23133576394da29f346082a145d2a60e726fcba0ab",
"wss://nostr.land",
"root"
],
[
"e",
"0000b0010807a421bd6651c05d97be0b0190b2e2dc0bd4f3119038bdaa183c8a",
"wss://nostr.land",
"reply",
"f985d309197c805e1719c73185b574fc3ee407d7c1b6157dee99c6ace2599bbb"
],
[
"p",
"f985d309197c805e1719c73185b574fc3ee407d7c1b6157dee99c6ace2599bbb"
],
[
"client",
"Damus"
]
],
"content": "Technically yes, in practice you have 1 or 2 yrs at most.\n\nDuring this time, most pieces of software, especially specialized ones, will have on average 0-10 people look at it. Out of these, approximately 0.01 will report any issues.\n\nThe biggest and most secured OSS projects are corporate backed with many companies having a vested interest in its security, not a medium sized company or random person dumping their code on GH",
"sig": "baa90886afaa4f9defae451858fe09033e978f271786e3a70007a685e2582a9f033d285b2e7a6e3daee0a86284d857a97a55a972646274aa3e4c275c9e8d0a99"
}