Yep.

This is why we self host any code we use, ensure we’re within licensing agreements and then code out anything that could fuck is this way.

Some of our work explicitly forbids fixing bugs upstream without an audit of what it tells and so we quickly fork and move past.

This dude did no wrong, it was his code and his package.