No matter how they package it, running a binary downloaded from Internet has the same attack surface

Yes, autocorrect messed it up

Oh it’s the continuation of XMMS, I have found memory of using that!

To be honest it has always been this way. Especially when we were talking about “Free Software”, and open source was in part a way that it was free as in freedom, not free as in doesn’t cost anything.

Of course the term open source didn’t change anything, because if you look at the definition of open source, you’re allowed to share it so obviously you’ll be able to get a copy for free.

And uesst what, not having to pay is such a big difference that’s what people remember.

I mean if you want to live off your work, then of course you’re a business.

Or if you want to get money without all the fundraising hassle, get a salaried job.

Basically you want to work in open source on whatever you want, not have to listen to users, not have to find funds, and still be paid for it?

The point is that saying “pull requests welcome” is still work for the maintainer, because now you have to have these discussions with potential contributors, sometimes explain them why you don’t want to maintain the feature, or explain them why this PR is not the way you want…

So either way it’s work, it’s important to keep in mind before saying “just send a PR”.

The problem is when people then open huge PRs and expect you to take time to review them, then eventually merge them.

Especially when it’s something you don’t want in your codebase because it introduce a big unnecessary “refactoring” or a feature that you don’t want to have to maintain forever.

Yes, it is really a one time fee.

However if you sell apps (or in-app purchases) they’ll take a 30% cut, just like Apple.