[lelanthran]

> OpenClaw and OpenCode are open source projects with zero warranty and nobody to sue if they have a npm Trojan in them

When has any technology company been sued for pushing accidental malware in their updates?

The reality is that you have never had anyone to sue.

[TeMPOraL]

Sure you did. But 99% of the time, you get the benefit of things that come with ability to sue - such as the vendor having a support team that's actually incentivized to respond to reports and deal with them quickly.

[63stack]

I agree with parent, "having a contract" gives you nothing tangible. Big tech providers get hacked quite commonly nowadays, some with glaringly embarrassing vulnerabilities like "the admin password was admin". All your data leaks, and the most you get from them going "sorry".

Having the ability to sue, and having the resources to sue is also not the same.

The amount of times I had to deal with support cases (as the reporter, not the handler) where I felt like the support person was actually incentivized to solve my problem vs just following the script is astonishingly low. Even with paid support. Paid support just means you get to follow their script faster.