[orochimaaru]

I think deploying to the etherium network and providing the api is probably the murky area. Who is responsible for knowing the users - etherium or the provider of the contracts.

If he had not deployed anything and it was just code in his repo I would have said this is a really dangerous ruling. It opens up every open source dev to be on the hook for any use of their software.

On the other hand if this was something deployed then it becomes much more subjective.