yesterday the #curl project got an email from a person announcing their grand new project to security audit a range of Open Source projects. Got a fancy project name and all. Asked for permission. Two hours later the same person emailed us again, announcing that he shuts down this effort blaming "widespread failure affecting Codex". We never got to respond. Moving on.