To be fair, it&#x27;s probably not &quot;many eyes make all bugs shallow&quot; which is necessarily false, but the implication that open source guarantees enough eyes to begin with.<p>Whether or not an open source project is popular, whether contributing looks good on a resume, the number of competent programmers in the relevant fields with time to spare, and even the aesthetic quality of the code probably have influence on how much attention it gets. A hip framework is bound to get much more attention than an old, horrifying to look at mess of C, even if the latter happens to be mission critical to the internet.<p>All bugs might be shallow, if the number of eyes scaled in proportion with the amount of code, and the number of languages remained constant. The problem might be that people simply assumed Linus&#x27; law to be axiomatic, which results in kind of a Someone Else&#x27;s Problem field permeating the community, as well as an implicit trust in the security of FOSS code which might not necessarily be warranted.