Keep in mind that while I am employed by the Linux Foundation, I know nothing of the internals of this project; I will speak, instead, of what the projects I support do.
I have found (c) to be high noise, low signal. We're winding down our HackerOne program.
D: we do this in a couple ways. For PQCA, for instance, we use credits from AWS to get access to hardware to run proofs and CI on. PQCA also has a paid mentorship program.
For OWF, we do the same with AWS credits, as well as provide hosting for projects to run services on for testing.
For LFDT, we offer paid mentorships, have paid for Trail of Bits to do reviews, and run events. We had a maintainer summit in New York in January so our maintainers could meet for two days face-to-face. We fund large GitHub CI runners for projects as well.
I know it doesn't answer everything, but our team is only a few people and we really do work hard to help developers. What I'll call the devrel team for OWF/PQCA/LFDT is three FTE, one contractor, and our manager.
I will point to two items. One, an interview I had. Two, a footnote in history.
1: I own a gun because a disarmed populace is required for genocide and should it come around again, I’m not going to be that guy. I’m not going to be standing on the side.
I manage multiple open source Github enterprises for the Linux Foundation. Something like this is under discussion in all of them - the amount of terrible PRs and issues being filed is overwhelming.
For my Linux machines, I'm almost always coming to them via SSH or proxmox console. I started with Unix in like 85 or 86 and live on the command line when I can.
[email protected]
github.com/ryjones
linkedin.com/in/ryjones/
[ my public key: https://keybase.io/ryjones; my proof: https://keybase.io/ryjones/sigs/_Y74JM4Ky1cr_jPoSyTVPmKzUsidThTLwwMAFlOGOlQ ]