alt Hacker NewsThe concern here is probably with the shipping of the product (i.e. the binary artifacts), not the code itself. I can imagine a situation in which you could continue to make the code available, but could not produce a shippable artifact from it that Illinoians could access.
If they are successful at doing so, then those distribution methods were too brittle.
I expect in response one of the maintainers outside US jurisdiction of their own volition publishes via bittorrent, tor hidden services, and embedding blobs in public blockchains with no help from me.
Then the problem the legislators sought to solve just got a lot worse, while calling a lot of attention to how little power they actually have to control decentralized FOSS software projects.
Of course another point of the project is building the entire thing from source code with deterministic results only takes a few hours. For many, this would be faster than downloading artifacts.
It is not needed for maintainers to publish binaries at all. Publishing signatures on the expected hashes would suffice at worst.