Thanks to the wonders of capitalism, a bunch of businesses that would have to yield to tyrannical open source devs and their goody-two-shoes mentality can pool their bargaining power and each pay a little to a benevolent clean room reimplementer of security fixes.
Or, they can vendor the library and ask Claude to fix it in-tree 🤷
They would just fork it at that version. Licenses aren’t retroactive.
Yeah, but realistically these companies just pull new versions to overcome CVE blockers, and don’t have the resources to fork and maintain
Thanks to the wonders of capitalism, a bunch of businesses that would have to yield to tyrannical open source devs and their goody-two-shoes mentality can pool their bargaining power and each pay a little to a benevolent clean room reimplementer of security fixes.
Or, they can vendor the library and ask Claude to fix it in-tree 🤷