so maintainers are starting to push back on these requests, and demands for free labor on a project that they give away for free, as if it were a commercial product.

in response, rather than the government scolding corporations for abusing the commons, these corporations have instead pushed for governments like the EU to adopt regulatory regimes such as the CRA which pressure maintainers to do even more free labor, in the name of security.

everyone likes security, right? as practitioners, we don't want to harm anyone's security posture. so there is pressure on maintainers to comply with these regulatory frameworks, in the name of security.

can i tell some corporate employee who makes a burdensome request to get lost? sure, and i have before.

can i tell some corporate employee who makes a burdensome request required for compliance with a regulatory framework like the CRA that i won't do it and they have to do it themselves? sure.

note i ask "can i" here, and the answer is yes.

that's not the point though. the reality is more complicated. do maintainers *actually* have the psychological safety to reject these requests?

what is the actual psychological cost of saying no?

0

If you have a fediverse account, you can quote this note from your own instance. Search https://social.treehouse.systems/users/ariadne/statuses/114714478204794129 on your instance and quote it. (Note that quoting is not supported in Mastodon.)