They usually send everything upstream, and everything is public in their source control. Some maintainers look at repology.org to find package stuff from other distros.