nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq6uk4yyw47haxwl0klhh7lcx3qatkyqmpc6gc4hwru3qedaeuueeq2lv9wr (nprofile…v9wr) consider that as you're a Foss developer, your threat model is actually elevated. You specifically may not be a direct target, if members of the diaspora community or critical infrastructure operator use any code you contribute to. Then there's a real risk of becoming a supply chain attack vector for any group that relies on your code or expertise.
At the least take stock of your security and secret management, if for no other reason than to reduce potential harm to end users.