This is why I have trust issues with using open source projects which aren’t supported by companies.  While he isn’t wrong I think there were much better ways to handle this.

Source: Open source developer corrupts widely-used libraries, affecting tons of projects – The Verge