This is the distro that allowed one of their package maintainers to silence a valgrind warning by commenting-out some code that they didn't know or understand that resulted in generating only ~32,000(?) possible SSH keys
Characteristically good piece on this by Russ Cox: https://research.swtch.com/openssl
> "The story of Galactica isn't that people make bad decisions under pressure, it's that those mistakes are the exception."
The story of Debian isn't the mistakes, it's how few mistakes there are. It's an entire operating system that's been release consistently for over 30 years and currently in 78 languages. There are around 122k packages in the official software repository, almost all packaged by the Debian project. In terms of number of possible combinations of installed systems, just in software packages, that's something like 21 googolplex. Or around 445x the number of atoms in the observable universe. Never mind the different architectures and all the different hardware variants they could be installed on.
Even if it wasn't given away _for free_, it would be an impressive achievement.
"Yeah, but one time they had a bug!"
Yes. Of course they did.
And regardless of how you feel about the default the way they went about it broke things for users and made more work KeePassXC's maintainers.
You might disagree but given how easily it could've been avoided I think it's pretty wild.
For users using Debian unstable and even there it was apparently fixed/improved after a week. Debian stable users had no "wild ride" and for the future became the choice to select between the full featured keepassxc version and a minimal variant without non-essential network and IPC features.