Not just that how the maintainer was treated by the attacker which tells you something about the way people feel entitled to maintainers time and efforts for nothing even by people not looking to exploit the project. And the abuse after he received despite it being an easy mistake that the culture encourages people to make.

It still haunts me, that dot they slipped in, in one of the commits, every time I merge a PR

I never suggested that you shouldn’t check the commit before merging!