There's also somebody "helpfully" emailing me that I am leaking secrets in source code. That is, the credentials for the UDD mirror - https://udd-mirror.debian.net/ - from a function called public_udd_mirror().