Hacker News Reader

Pretty much all free and open source software licenses specifically say there is no warranty at all.

All non-trivial software has security bugs. To reiterate, every program you've ever heard of has had and will have serious security bugs. If no bugs have been published, then either nobody is looking or someone is keeping them secret.

I agree that Apache has behaved irresponsibly.

View on HN

There's a huge difference between "this has bugs, like all software" and "this has known exploitable bugs and there is no mention of this anywhere".

Warranties are not the same as being misleading.

Apache has a process for retiring inactive top-level and incubator projects. It's not immediate but it does happen quite often.

Indeed it does. That's the process which was mooted last September.

However contributors _and Apache Board Members_ chimed in to announce that Apache OpenOffice was healthy and would continue. They managed, weeks laters, to spit out a release containing almost literally just one bug fix and then nothing since. So long as Board Members pretend everything is fine the Apache process won't trigger. This has become about the ego of Board Members versus the interests of the wider community.

Reply on news.ycombinator.com