Tim Fish @timfish.dev · Aug 5 In the video you linked it says it doesn't apply if you aren't monetizing which suggests it doesn't impact the majority of open source maintainers
0 likes 2 replies
?
Replies
that's where things actually get very messy: first off, the donation side of things is super unclear. Very likely a lot of people that have GH sponsors and such would be affected. moreover, what if your software is used in commercial software? that's another very unclear part
If a company uses your OSS library in a product, they are entirely responsible for all parts of the product, including components from third parties: best.openssf.org/CRA-Brief-Gu...