we have got to stop talking about open source software this way man. someone who published work with an explicit label on it saying "this comes with absolutely no warranty" and is not being compensated is not part of a "supply chain" https://abyssdomain.expert/@filippo/114723318068853623
years of insisting that volunteers owe things to huge companies that aren't paying them has, empirically, not worked out, you need to try a second idea
If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.social/users/jcoglan/statuses/114728284361049895 on your instance and quote it. (Note that quoting is not supported in Mastodon.)