> This still goes to the heart of the obligations of maintainers. I don't think this comes down to an "obligation" of open source maintainers. I think it's pre

> This still goes to the heart of the obligations of maintainers. I don't think this comes down to an "obligation" of open source maintainers. I think it's pretty evil of ANYONE to market software pretending it's one thing, when it reality it's malware. Open Source or not doesn't change that. > It's the end user's fault for continuing to pull that source code and integrate it into their system. More than one party can be at fault.