> And, clearly the volunteers in the post we're referring to here feels a duty, or they wouldn't be concerned about making the necessary changes to update the t

> And, clearly the volunteers in the post we're referring to here feels a duty, or they wouldn't be concerned about making the necessary changes to update the tool and libraries provided. I'm not sure you're on the right track by thinking of this in terms of "duty". Someone might be working on open source for any number of reasons, possibly none of which are because they feel a duty towards any particular user of the tools they're working on. They may simply wish to produce the best, most secure tool possible at the lowest cost to themselves. That doesn't mean they have a duty to (say) keep around older, insecure versions just so users who haven't done their own due diligence can minimize work disruptions. Given the lack of an existing "better way", I'm more than willing to cut open source maintainers a bit of slack until such a time as I'm paying them decent rates.