Comment by throwaw12
13 hours ago
then it is up to community to fork the project if they find it valuable and can convince people migrating to their fork.
many engineers actually work that way, right? We are employed for 12 months and give our availability fully to the company and we get salary for it, why isn't it allowed to others?
A fork of a project that does security patches only is an interesting idea...
Since then a diff of the two projects will be a perfect list of security issues and will make designing an attack rather easy...
Only until the next feature lands in upstream, likely accompanied by some refactoring.