Your users are people who compile software with your package. That software could be run on their server (in which case your political message appears harmless

Your users are people who compile software with your package. That software could be run on their server (in which case your political message appears harmlessly in their logs), or it could be distributed to other parties. Those other parties would then read in their logs, "I distribute software that has an insecure supply chain and relies on people who are not mature enough to avoid grandstanding at every opportunity."