Post

the problem is not that it’s free software (free to fork, free to study, free to modify) run by a rag tag group of maintainers - the problem is it’s the literal backbone of all modern digital infrastructure and should be considered “too important to fail”. So yeah, when rsync vibes, it’s concerning.

The societal importance or number of users of an OSS project doesn't change maintainers' responsibilities. The responsibility lies, as it always has, with integrators. OSS is "free as in puppy," and when you take a dependency you take the implicit responsibility to maintain it yourself if needed.