I must say I find it rather laughable that you scorn at those who take for granted the work that has thus far gone into Cemu, only to denigrate the hard work that has gone into other projects by referring to it as a 'joke'. Indeed, immaturity can be seen throughout this thread, but it's hard to take the high ground when you make farcical generalisations such as claiming that they're 'pirates'. Yes, I'm sure they're baby-killers as well.
Also, it is simply naive to judge open source projects by the frequency of commits, or even by their publicity. Different projects and different developers take different approaches to managing their Git repos. In the case of Citra, changes are often made to forks before being submitted as a pull request, which is publicly scrutinised before being merged into the main project. Or alternatively, Git commits may be made locally before being pushed in large chunks. And whilst yes, Cemu may appear to show greater publicity than other emulators at this time, that does not mean development has ceased. Different platforms have different architectures that each present their own challenges when creating an emulator. It just so happens that the Wii U uses both hardware and software that are relatively well-documented and well-understood, and hence progress has moved forward rapidly. But I'm certain you already knew all of this as a game developer yourself.
As for the Decaf project, what are you talking about? Like Cemu, there are only two main developers, exjam and brett19, who each have jobs and yet still manage to pour in significant amounts of work in as can be seen by your beloved commit log
https://github.com/decaf-emu/decaf-emu/commits/master. Additionally, Exzap has noted himself that Cemu has been in development for some time prior to its public release, so it's hard to take seriously phrases such as 'pick up the pace' when Cemu has had a head start.
Finally, with regard to these viruses, I'd love to see these 'results' you speak of. Closed source programs are a black box. They may have a virus, they may not. Who could know? Virus scanners don't always detect everything. At least open source programs provide an opportunity for a much wider audience to inspect the code for malicious contents. Closed-source programs require innumerable hours of careful scanning through assembly instructions that the majority of people simply do not have, or lack the skills to do so. That's not to say Cemu contains any viruses, I'm very doubtful that it does, however it is difficult to know this for certain.
Cemu has indeed made remarkable progress over these past few months, and I applaud Exzap and Petergov who each have each done a splendid job in achieving what they have. However, pretending everything is faultless is just as deplorable as claiming it is completely flawed.