Our process for patching external projects is pretty straightforward (https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fopensource.google.com%2Fdocs%2Fpatching%2F). Tell your buddies to contact me (they can look me up in our internal directory) and I can try to help address their concerns. -Will Norris