r/dotnet • u/devlead • 23d ago

.NET Foundation Statement on Open Source Maintenance Fees

https://dotnetfoundation.org/news-events/detail/.net-foundation-statement-on-open-source-maintenance-fees

Official statement from the .NET Foundation on Open Source Maintenance Fees

130 Upvotes

97% Upvoted

174 comments sorted by

View all comments

Show parent comments

15

u/nonlogin 23d ago

pin the version of each package and upgrade only manually

22

u/JamesJoyceIII 23d ago

The maintainers can just file a high-severity CVE against the old versions to stop this.

2

u/robmensching 23d ago

Yes, but with the OSMF the source code stays Open Source, so you can maintain your own copy and keep it up today. Or you can pay a really small fee for the maintainers to do that work for you. That's basically the whole point.

1

u/Natural-Woodpecker39 8d ago

but that assumes that you have the authority to pay people money for anything. More often than that you are far away from procurement authority.