It's the gift of open source: Nobody owes you anything except the source code. Any and all guarantees must be via written contracts. Nobody owes you a secure supply chain until there is a contract stating such.
Giving people food for free (without written contract) but poising them in the process will leave you in hot water with authorities. Why software should be different?
Giving people food for free (without written contract) but poising them in the process will leave you in hot water with authorities. Why software should be different?