4 ms·
Ask HN: Are OSS developers responsible for ensuring their code is secure?
But no one is paying them for doing so
- mr90210 4y agoWell, if I invoke ethics here, I think it’s my responsibility to write secure code as much as I can. There are even services that allow the detection of malpractices and provide free tiers for OSS projects, such as Sonarqube. Obviously this is easier said than done when the OSS project is small and not used by many developers.
- bradwood 4y agoThey're not under any contract or obligation to make any promises about their software, so I'd say NO.