[FFmpeg-devel] [PATCH 3/4] doc/faq: Document the plan ahead for Governance

[Ronald S. Bultje]

Hi Michael,

On Fri, Jan 10, 2025 at 9:01 PM Michael Niedermayer <michael at niedermayer.cc>
wrote:

> But i think a company which actually depends on a FFmpeg vote outcome
>
> will be able to connect the dots and be able to enumerate the options
> to influcence said vote
>
> * do they have an employee with vote rights, iam sure she will not
> vote in a way that ends her own job
>
> * how did she get these vote rights ? ahh she submitted 20 patches ...
>
> * are there other employees who could submit 20 patches ?
>
> * are there contractors who could submit 20 patches ?
>
> * can they hire someone who could submit 20 patches ?
>

This is true, but...

Should we then document the xz exploit workflow on our website also? And
this can go on forever.

This is negative documentation that does not belong on our website. We
should document the positive aspects of our software and community, and try
to fix the negative ones, rather than document the negative aspects and
forget what's positive about ourselves.

Ronald