Curl Security Audit
Awesome to see heavily used (and often embedded) OSS software getting a sponsored audit like this. I wonder the same could happen  for sqlite and others.Given the number of vulnerabilities that "state sponsored" folks are likely to know about, this seems like a very useful defense and a way to increase confidence in our building blocks.