On: Social engineering takeovers of open source projec...

[sesm]

An issue usually doesn’t have the code for implementation of the solution. Yes, very often patches are attached in comments, but they are not required and usually attached by other people, not the author.