I’d be very skeptical of claims that Debian maintainers actually audit the code of each piece of software they package. Perhaps they make some brief reviews, but actually scrutinizing every line for hidden backdoors is just not feasible.

Maybe they though something like this: “Philosophy conference needs philosophers. Mathematics conference needs mathematicians. Obviously, an antisemitism conference needs anti-semites.”

And who hasn’t contributed any code to this particular repo (according to github insights).