[braza]

> I don't understand what people are complaining about. Noone is entitled to receive free Docker images.

Every time I read something like this, I recall this post from Rich Hickey[1][2] on why no one is entitled to benefit from another human being's goodwill and time.

From the post:

> The only people entitled to say how open source 'ought' to work are people who run projects, and the scope of their entitlement extends only to their own projects.

> Just because someone open sources something does not imply they owe the world a change in their status, focus and effort, e.g. from inventor to community manager.

[1] - https://gist.github.com/richhickey/1563cddea1002958f96e7ba95....

[2] - https://news.ycombinator.com/item?id=18538123

[lemagedurage]

But not everything can be "fair game" when providing a service for free. Surely it wouldn't have been OK if they suddenly included a bitcoin miner or extracted credentials. They offered a free service, people trusted it, depended on it. Now, in my view, they have some responsibilty to their users.

Giving a notice in advance and releasing a final image that patched the CVE would've been reasonably responsible.