←back to thread

Libxml2's "no security embargoes" policy

(lwn.net)
277 points jwilk | 1 comments | 25 Jun 25 19:36 UTC | HN request time: 0.252s | source
Show context
zppln ◴[25 Jun 25 21:51 UTC] No.44382133[source]▶
Very sad read. Much of the multi-billion dollar project I work on is built on top of libxml2 and my company doesn't have a clue. Fuck, even most of my colleagues working with XML every day don't even know it because they only interface indirectly with it via lxml.
replies(3): >>44382162 #>>44383083 #>>44385618 #
burnt-resistor ◴[26 Jun 25 00:23 UTC] No.44383083[source]▶
Well, they need to pony up around $150k or so to keep it alive rather than freeloading off the work of others.
replies(1): >>44384725 #
sneak ◴[26 Jun 25 06:32 UTC] No.44384725[source]▶
It’s not freeloading to accept a gift given freely.
replies(3): >>44384899 #>>44385604 #>>44387586 #
1. atemerev ◴[26 Jun 25 09:15 UTC] No.44385604[source]▶
It is not freeloading, but correspondingly you cannot demand anything from a gifter. Not even "could you please look at it". They might. Or they may ignore you. Or they may delete their repo and go away to the wild. Up to them.