3 ms·
Does that happen though? log4j developers were working overtime to fix the security bug [1], while corporation expected them to release the fix ASAP for free. W
by HexDecOctBin 5y ago
Does that happen though? log4j developers were working overtime to fix the security bug [1], while corporation expected them to release the fix ASAP for free. Who was paying?
[1]: https://twitter.com/yazicivo/status/1469349956880408583 https://twitter.com/yazicivo/status/1469349956880408583
- aloisdg 5y agoI am glad they did though they didn't have to.
- ensignavenger 5y agoLike, all the time? I'm not sure what you mean- Log4j has several listed on their website- https://logging.apache.org/log4j/2.x/thanks.html https://logging.apache.org/log4j/2.x/thanks.html, and many dozens of people directly sponsor log4j contributors via Github Sponsors- https://logging.apache.org/log4j/2.x/thanks.html https://logging.apache.org/log4j/2.x/thanks.html There are also various log4j forks. And that is just the one project you mentioned, the world of Open Source software is very vast, with many contributors, forks, and financial sponsors.