developer is officially maintaining the package.
The rationale for changing this from "tech-pkg" to "pkgsrc-users" is
that it implies that any user can try to maintain the package (by
submitting patches to the mailing list). Since the folks most likely
to care about the package are the folks that want to use it or are
already using it, this would leverage the energy of users who aren't
developers.
Tainted data is data that comes from an unsafe source, such as the
command line, or, in the case of web apps, any GET or POST
transactions. Read the perlsec man page for details on why tainted
data is bad, and how to untaint the data.
When you're writing unit tests for code that deals with tainted
data, you'll want to have a way to provide tainted data for your
routines to handle, and easy ways to check and report on the
taintedness of your data, in standard Test::More style.