> A developer can absolutely make an agreement in which he takes on the liability. He's going to need to be paid to take that liability on, to both spend the time to eliminate defects, but also to purchase insurance so that he isn't bankrupted when a defect inevitably gets through and causes harm.

Hmm... I hadn't though about the implications of this before. Is this a solution to the mythical funding balance the industry is failing to achieve? Enterprise software already operates like this. What if e.g. github reframed its project sponsorship model as something that involved getting maintainers setup with liability insurance and the ability to offer sponsors warranty and liability for their software.

My concern with the rust ecosystem right now is that it goes the way of node and projects just get littered with endless libraries that were fresh and hot at one point in time. Often times you open issues and it takes days or weeks to get a response if at all because the maintainers have moved on.

I'd be super interested in only using dependencies where I could subscribe to liability and warranty service after I've tried them out and they're want I'm going to roll with. And you would even potentially see interesting things like "pure" chains where all software used is covered by somebody.

This model would also have the interesting effect of promoting software design and language selection that results in "easier to warrant" not just "does the job" and maintainers that do a better job at writing good software would bubble to the top since their liability insurance premiums would stay cheap. If you write too much crappy software, at some point it becomes unaffordable and you go work for Facebook (it's a joke! you get the point).