3 ms·
None of those categories seem to be "caused" by underfunding or unappreciation, except perhaps the faker.js issue? There are more incidents in that category tho
by remram 4y ago
None of those categories seem to be "caused" by underfunding or unappreciation, except perhaps the faker.js issue? There are more incidents in that category though, for example many Python developers stopped maintaining their projects in protest when pypi.org put additional requirements on people whose projects were particularly popular (those people were forced to enable 2FA).
- iforgotpassword 4y agoThe left-pad one too I guess. Some of them could've been caused by underfunding, if a maintainer would have preferred to spend more time and care on their project but had to some other work to make ends meet, and got sloppy with their OSS project.
- remram 4y agoThis is arguably true of anything, and therefore not very interesting IMHO: any project could be better with more funding, any bug could have been avoided with more effort.
- iforgotpassword 4y agoYes but this would be measurable with effort. If something like this happened, investigate, talk to maintainers and assess the situation the project is in. It would be interesting what the ratio of "that's just how we roll" vs. "I'm stressed out and can't keep up with bug reports and PRs and just committed stuff to keep up" is.
- Tainnor 4y ago> There are more incidents in that category though, for example many Python developers stopped maintaining their projects in protest when pypi.org put additional requirements on people whose projects were particularly popular (those people were forced to enable 2FA). Yikes. Everyone is absolutely free to ignore security wherever they wish on their personal projects, but that just means I won't let any such code anywhere near a production codebase.