You post it on HN first where all the grumpy security open source contributors congregate.