Emmanuel Seyman wrote:
* Gerald Henriksen [26/09/2017 09:02] :
> That may be fine for any packagers who are actually paid to package
> (though even then I would have my doubts that every line of source has
> been checked), but it is clearly an impossible task in terms of time
> required for all the volunteer packagers.
The solution in this case is to not volunteer to do things you are
not able to do.
It is just plain impossible to audit something like QtWebEngine line by
line. By the time the whole code would be audited, there would already be a
completely different new version.