Earlier quoted context omitted.
When you always published and built Docker images for the public you are creating an expectation, people will rely on that and will chose your software based on that expectation. You suddenly deciding that you won't be offering updated Docker images especially after a CVE and with no prior notice (except a hidden commit 4 days ago that updated the README) is approaching malicious-level actions. If they truly cared ab…
> When you always published and built Docker images for the public you are creating an expectation That expectation does not entitle anybody to anything though. > people will rely on that and will chose your software based on that expectation That is their decision. Without any contract or promise, there is no obligation to anybody. > You suddenly deciding that you won't be offering updated Docker images […] is appro…
> That is their decision. Without any contract or promise, there is no obligation to anybody.
Not everything is legally enforced. Open source is a social phenomenon. Why are you so surprised that these social rules are being enforced socially?
There are obligations... it's how society functions.
> I really don’t get this entitlement. “You are still doing unpaid work I benefit from, but you used to do more, therefore you are malicious.” is something I really cannot get behind.
I really don't get this entitlement. You expect that nobody should follow any social contracts and I'm sure are always surprised when people call you out for being asocial.