root@construct:~/rants/the-open-source-maintainer-is-not-your-employee$
<-- back to /rants
2026-03-16//RANT

The Open Source Maintainer Is Not Your Employee

Got tagged in an issue thread yesterday where someone was demanding a fix for a bug in a library that is free, open source, maintained by one person in their spare time, and used by this complainer in a commercial product generating revenue.

The tone of the issue was incredible. "This is UNACCEPTABLE. We deployed this to production and it broke. We need a fix IMMEDIATELY." Sir, the last commit was made at 2:47 AM on a Tuesday. The maintainer has a day job. The library is free. You deployed it to production without reading the changelog. But somehow this is the maintainer's emergency.

"This does not work on MY setup." Cool. Did you read the requirements? Did you check the supported versions? Did you provide a minimal reproduction? No? You just pasted your entire stack trace and wrote "FIX THIS" in the title? Fantastic.

"When will this feature be added?" When someone builds it. That someone could be you. The code is right there to fork and work on in a branch before submitting a PR. That is the point of open source.

"I found a vulnerability." Great, report it responsibly. Do not open a public issue titled "CRITICAL SECURITY FLAW" with full exploitation details and then get angry when the maintainer does not respond within an hour. They are at their kid's soccer game. The vulnerability has existed for three years. It can wait until Monday.

Every open source project you use for free represents thousands of hours of unpaid labor. Someone has to debug it and write the documentation, then answer issues and review PRs from strangers. Some of those issues just say "this sucks" with no further context.

The maintainer owes you nothing for sharing their work. You chose to use it, so a breakage in your production system is your responsibility. Pinning the version, writing tests, and reading the source were all options available to you.

If you need guaranteed support, pay for software with an enterprise tier or hire a consultant. But do not yell at someone who gave you their work for free because it does not perfectly fit your undocumented edge case.

To every open source maintainer reading this: thank you. Your work runs the world. You do not owe anyone a response time SLA.

The Broad Way | Kinho.dev