Security isn't a special license for being nasty. Criticism is fine, even with some urgency due to security being important. But software done for free by volu

Security isn't a special license for being nasty. Criticism is fine, even with some urgency due to security being important. But software done for free by volunteers carries no obligation of a legal or even a moral kind, whatsoever. This is completely different from selling software or doing work for hire or donations. There a moral and often even legal obligation exists.