I would be surprised to see a security library developed with the bazaar model. It'd be difficult to assemble enough interest and capable reviewers.

In this case it looks like the GnuTLS bug was introduced and fixed by the same person, but I didn't go look to see how many others there were.