Not explicitly laws, but like contracts, regulatory requirements, SLAs all indirectly enforce that
Well, they at least say that one is obligated to address bugs in a timely manner (where "not widely exploitable; won't fix" is a perfectly valid resolution).
alt Hacker News
Well, they at least say that one is obligated to address bugs in a timely manner (where "not widely exploitable; won't fix" is a perfectly valid resolution).