> Don't judge their code by their use of a VCS. It's like judging a person's articles by their notes. I've got terrible handwriting. Except notes rarely are i

> Don't judge their code by their use of a VCS. It's like judging a person's articles by their notes. I've got terrible handwriting. Except notes rarely are intended to be public and used for communication with other developers. While I agree that bad commit messages every now and then are not a big deal - that is not what the original commenter was referring to. Of the 23 commit messages, 8 of them are just "1". The only meaningful commit message was from a 3rd party PR that was merged. For security-related code, "hygienic" coding practices, including quality commit messages, are - at least in my eyes - important.