I created a Proposal for a Maintainers file. OpenIndiana/oi-userland #26886 let me know if you want to sign up for roles or packages

I'd be surprised if the crypto libraries really have a higher CVE cadence than vim these days

though their CVEs tend to be far more impactful than vim's

Ah good catch. Although there is probably going to come more once The Security research models get their release.

at least the big libraries like OpenSSL batch their CVE's and put out one big advisory with a dozen at a time, instead of vim's just throwing them out as they come in, every few days