Thanks to the wonders of capitalism, a bunch of businesses that would have to yield to tyrannical open source devs and their goody-two-shoes mentality can pool their bargaining power and each pay a little to a benevolent clean room reimplementer of security fixes.
Or, they can vendor the library and ask Claude to fix it in-tree 🤷
Yeah, but realistically these companies just pull new versions to overcome CVE blockers, and don’t have the resources to fork and maintain
Thanks to the wonders of capitalism, a bunch of businesses that would have to yield to tyrannical open source devs and their goody-two-shoes mentality can pool their bargaining power and each pay a little to a benevolent clean room reimplementer of security fixes.
Or, they can vendor the library and ask Claude to fix it in-tree 🤷