One RCE bug in a codebase only one person actually knows really well… recipe for disaster.
It could happen. I’ve been coding more than three decades and I’ve read some real horror stories over the years.
If I were a luajit user, I’d be interested in trying to raise funding to get some more eyes on the source. It’s an engineering marvel, that’s incontestable, but it needs more coverage in case something happens. Even just to make room whenever Mike decides to retire.
I thought cloudflare and Kong would kick back to the community more, but that seems not to be the case.
There are a few things that might be nice to have, but few of them are worth more platform churn.