The whole #Log4Shell kerfuffle is yet another reminder that the relationship between enterprises and the open source ecosystem is just broken. We, and I am sure many other foundations, are getting requests from enterprise IT depts "is version X from 2014 of project Y affected?" These are B$ companies that have never ever contributed to these projects in any way. Not a single issue, patch, dollar, or even a thank you. And yet when the shit hits the fan the software is "strategic" or "critical infrastructure".

I wanted to share some additional thoughts on my recent blog post regarding @JakartaEE eclipse-foundation.blog/2019/05/03/jak… The Java community certainly has lots of smart and passionate people in it. And while the reaction has, for the most part, been pragmatic, I would like to comment on some of the Oracle bashing that I think is unwarranted.