[zxzax]

Again, they may be under a non-negotiable contract with a government to say that. The replies further down the issue seem to suggest that is the case. I don't defend the actions of the parties responsible -- But the fact is if there are no Chinese laws being broken, I don't believe you or I are in the position to make that judgement, or at least that case hasn't been made so far. If your concern is with an oppressive government, please don't attack people who are also being oppressed by that government, and please don't suggest people ignore potentially real threats that could get them arrested by that government. I agree with you, I don't want the author of this software to get in legal trouble.

[ratww]

Again you're making conjectures and not sticking to facts. The only person attacking a person oppressed by the CCP is the MuseScore developer. He's also the one threatening to involve the CCP. And you're being an apologist for them. It wasn't an alert, nor an attempt to make the plugin legal. The "Otherwise, I will have to transfer information" is a pure and simple threat. And you're the one making excuses for that behaviour.

If this is a real threat then MuseScore really handled it the worst way possible and they should be ashamed for purposefully threatening to endanger a CCP citizen. If it's not, it's just a mafia-style shakedown.

Once again: if you don't see a problem with calling the CCP police on someone whose only personal information we know is that he's anti-CCP, then I don't think we have enough ethical common ground to even continue this discussion.

[zxzax]

Again, musescore may already be involved with the CCP for contractual reasons. Basically all companies who do business in China are involved with them in some way. These things happen for reasons beyond their control, e.g. an investor sells everything off to foreign investors who then change the terms. If you're being careful, you have to assume they are already compromised. I don't apologize or make excuses, it's just basic safety. My view is that if this person is really worried about threats coming from a government, it would be wise to take those threats seriously. Github profiles are public, so it's not exactly hard for them to find this information.

Edit: I agree with you that if this musescore developer is lying about that, then that would be wrong of them. But I don't think I have enough information to make that judgement. So I think that's where we're disconnected. At least for open source projects, my view is to take any and all potential legal threats seriously until the matter is resolved with the lawyers.