> There are more incidents in that category though, for example many Python developers stopped maintaining their projects in protest when pypi.org put additiona

> There are more incidents in that category though, for example many Python developers stopped maintaining their projects in protest when pypi.org put additional requirements on people whose projects were particularly popular (those people were forced to enable 2FA). Yikes. Everyone is absolutely free to ignore security wherever they wish on their personal projects, but that just means I won't let any such code anywhere near a production codebase.