How bad is it, really?
On Friday morning, I added a fix to #curl master.
In the evening, may brain told me. "You know, this fix, there is a case where it is not complete?"
"You are right", I replied. "I'll fix it on Monday."
On Sunday, a security vulture, one of thousands circling the repository, submitted a HackerOne vulnerability report about exactly that.
Everything we do, there is a world waiting to find imperfections, pouncing on it for profit. On. Every. Change.
@icing a thing I'm still grieving is the world where when someone reported a bug/vuln it was typically because either A) they were a user of the software, and bumped into the issue 😎 they thought harder about the code than I had when I wrote it, and found something overlooked. Some combination of those factors helped alleviate the feeling of "damn, I fucked up".
I'm all for improving things but the wave of input from drive-by "people" that are both divorced from the purpose/use of the software, and have also spent no time doing any real analysis of their own sucks... It wears you down in a uniquely new way and there's nothing compensating for the negative feelings.