3 ms·
> If log4j2 is responsible for your company's success, you have a moral obligation to donate to the person who creates this library thanklessly. That's a big i
by IiydAbITMvJkqKf 5y ago
> If log4j2 is responsible for your company's success, you have a moral obligation to donate to the person who creates this library thanklessly.
That's a big if, log4j is a logging library after all. This is an understandable position to hold for other types of dependencies (think react, database, UI components etc.) but the logging library is very far down in the ordered set of projects I'd donate to.
I will however leave a mark and donate to the top 3 dependencies I consider most important in my (non-java) side project.
Edited to add: If you offer your software at no charge, you shouldn't be surprised if people accept that offer. So I even disagree with the "moral obligation" bit. Doesn't mean that donating is a bad thing, however.
- ericb 5y ago> If you offer your software at no charge, you shouldn't be surprised if people accept that offer. So I even disagree with the "moral obligation" Sure, but don't complain then, if it doesn't work, or you get hacked using it. You get what you pay for. Nor should you be surprised if eventually, no one decides to "give you for free" something you value so little.
- IiydAbITMvJkqKf 5y agoOf course I can't expect anything. But paid software has critical security vulnerabilities too.