[jjav]

> I totally get where they are coming from but it does make it sound like unsupported software.

It is very specifically unsupported software! Read the license, it's right there in a legal document clearly spelled out (for many licenses, anyway).

> After reading that, I would not use it without completely understanding the code as if I had written it myself (and maybe that's what you should do for every dependency anyway).

A good phrase is that importing an open source library is like adopting a puppy. Sure you get the initial code for free, but all the work and mess from there on it's all on you.

Yes, if you want to rely on an open source library for production you do need to understand it as if you'd written it yourself! I know this principle has been lost in more recent times, but it remains reality. If you don't, you're just gambling on the hope that it'll work out. It can, but it's a gamble.

If you need more certainty, pay for a support contract with SLAs.