On: Log4j: Between a rock and a hard place

[closewith]

Surely then the responsibility lies with the people who decided to use this apparently incompetent work in their infrastructure?

If I release terrible software with a license that expressly has no warranty and someone uses it, surely that's on them?

[x0x0 → closewith]

You must audit every single line of code for every piece of software you use.