[dymax78]

Odd position. Apache devs thanklessly busted their ass patching log4shell in 2021.

[richbell]

I don't think that's a good example. While Apache devs are volunteers and Microsoft devs are employees, they were nevertheless criticized for their slow response time and perceived lack of urgency until it was far too late.

https://github.com/apache/logging-log4j2/pull/608#issuecomme...