Currently there are over 29000 source packages in the Ubuntu archives for just bionic, most of which are in universe. It is *impossible* to timely manage all of those packages with the resources we have, which is why 'main' packages are the ones that we try to maintain for the most part. rkhunter is a package in *universe* so the MOTU team should be mainly responsible for taking care of its updates. Similarly, the SRU team also cannot always handle every incoming request instantly - we're doing what we can but there's just a lot of work in all packages of all components.
Remember it is not just 'Canonical'. Ubuntu is more than just 'Canonical'.
Currently there are over 29000 source packages in the Ubuntu archives for just bionic, most of which are in universe. It is *impossible* to timely manage all of those packages with the resources we have, which is why 'main' packages are the ones that we try to maintain for the most part. rkhunter is a package in *universe* so the MOTU team should be mainly responsible for taking care of its updates. Similarly, the SRU team also cannot always handle every incoming request instantly - we're doing what we can but there's just a lot of work in all packages of all components.
Remember it is not just 'Canonical'. Ubuntu is more than just 'Canonical'.