4 ms·
Not only moral, but mostly legal. Warranties are not included. So it's a bit lame to blame "a popular third party library". The OP was trying to say a company
by plange 9y ago
Not only moral, but mostly legal.
Warranties are not included. So it's a bit lame to blame "a popular third party library".
The OP was trying to say a company of Atlassians size should dedicate the resources to vet (and fix) those libraries if they use them for these purposes.
- lolsal 9y agoI don't think anyone is trying to shift blame, just to explain what happened. I am not affiliated with Atlassian so I'm only guessing.
- plange 9y agoSorry, i wasn't trying to imply they shifted blame. But atlassian does bare the legal&moral burden of securing their product here.
- lolsal 9y agoI agree with you. I don't agree that they have a moral obligation to make pull requests to the open source library that had the issue. Hopefully they will, but there is no obligation there in my mind.