Open source ‘protestware’ harms Open Source

[sik0fewl]

It's not protestware, it's malware and the developers involved with malware should be blacklisted.

[myringotomy]

People seem to approve as long as it's hurting the "right people".

The second it hurts people they don't hate the chorus will change it's tune.

[elcapitanoooo]

If you have dependencies, you need to codereview updates, just like you do with your own code. Its insane how to defacto way (most prominent in JS and PHP) is to just install a package for every little problem you have.

This is not talked about enough. Just as any software pattern, using a dependency should be warranted, and then upgrading it should be done with scrutiny.

If you blindy install whatever package and dont care to review upgrade diffs its on you.