Comment by datenarsch

It's his project. It's your fault if you blindly trust random 3rd-party code on the internet and have your mission-critical software depend on it.