Lack of staff and funding likely led to the recent PHP security snafu; project has only one full-time employee, but that's just the tip of the iceberg — a dreary situation caused by services running old versions with no support
www.tomshardware.com
Never underestimate the power of complacency, the destroyer of internets.

70% of the world’s internet btw, but out-of-support deployments and little funding for permanent staff to manage the open-source project.

  • aanes_appreciator [he/him, comrade/them]@hexbear.netOPEnglish
    2·
    4 hours ago

    usually this is done through software licenses, but almost every time this happens:

    • Most of the B2B clients drop your product to immediately. When Json.NET (or some other ubiquitous C# library that eludes me) change this license agreement for business users, we expunged that fucker within a fortnight.

    • A bunch of B2B just don’t bother paying, out of malicious intent or negligence. Maintainers of the project in question don’t have the means (let alone time) to chase up royalties when half the time the response is my previous bullet.

    • A few B2B cough up the license fee.

    • A minority, but the one that fucks you over the most, plough a bunch of money and engineers onto a fork from before the license change. Not only do they get a bunch of your users for free, especially as their solution will be a drop in replacement to yours, but they usually end up making a fuckload more money from your work in the process!