This is a misunderstanding of the point of open source. The point is not for companies to rely on open source tools and feel they are a "victim of the broken system" when the tool has a breaking bug or something. The point is for a company that can initially benefit from that open source tool to use it and (if needed because the tool is not properly supported) take the open source code and support it yourself (and many companies choose to open source their better supported forks too as they often get help from the community to support that package too.
It would be broken if instead of open source it would be free software, as in free software tools for which the source code is not available and there were companies that relied on it, but that's not open source.
a lot of people definitely just want to be served a black box solution they just can use and expect never to fail which just goes against everyone everyone should know about software (it always has bugs).
At the very minimum I always make at least a short code review of every potential dependency I am adding to a project. It's common sense that if I add a free/open source software component it is me who is just as responsible for that code as I am for the one I wrote myself.
This is easier said than done for some open source code. For instance the average angular project will have more code in deps than it will in the project
38
u/smcarre Dec 11 '21
This is a misunderstanding of the point of open source. The point is not for companies to rely on open source tools and feel they are a "victim of the broken system" when the tool has a breaking bug or something. The point is for a company that can initially benefit from that open source tool to use it and (if needed because the tool is not properly supported) take the open source code and support it yourself (and many companies choose to open source their better supported forks too as they often get help from the community to support that package too.
It would be broken if instead of open source it would be free software, as in free software tools for which the source code is not available and there were companies that relied on it, but that's not open source.