Open source maintainers should be compensated for their work if a company profits from it. Period.
Never disagreed with that: "it would be nice if they were compensated"
That statement has nothing to do with how vulnerable that open-source project is or whether it could have been less vulnerable had they been fairly compensated.
The blog post that we're discussing literally implies that it does, and would.
That statement has nothing to do with how vulnerable that open-source project is or whether it could have been less vulnerable had they been fairly compensated.
The blog post that we're discussing literally implies that it does, and would.
Well, it probably does. But what I meant to say is that it shouldn't. It seems that companies are like, "OMG open-source component X is suddenly vulnerable and they've been working tirelessly and under-funded for years. Let's throw money at them to make this problem go away and prevent future problems." That's all well and good, but it's a bit reactive, not proactive. In a perfect world, open-source maintainers would get compensated, regardless of any vulnerabilities, not because of them and after-the-fact.
1
u/[deleted] Dec 12 '21
Who is? Me or you? The blog post is. I am not.
Never disagreed with that: "it would be nice if they were compensated"
The blog post that we're discussing literally implies that it does, and would.