I don't understand this attitude. If you put your work in the open, advertise it as an officially supported solution, and advertise it as secure, it had better

I don't understand this attitude. If you put your work in the open, advertise it as an officially supported solution, and advertise it as secure, it had better be supported and secure. You can't just put out broken software and hide behind "but you didn't pay for it so who cares." Even worse when the attitude is "it's not my fault, go fix it yourself and submit a PR." If that is the intent, why even open source it in the first place and tell people to use it. Just keep the code private and use it for yourself. Over the last decade I have written hundreds of thousands of lines of code for personal projects that will never see the light of day, precisely for this reason. It's not production-quality software, and it would be horrendously irresponsible for me to put it out in the open, advertise it, and tell people to use it, compromising the security of their homelabs (or worse, enterprise deployments).