Fascinating talk from @feross on @cfedev today: The Dark Side of Open Source

https://www.youtube.com/watch?v=hlLnFJSX0YY

Especially enjoyed the Q&A portion, really great stuff. One thing I keep coming back to is that when the lead maintainer changes, it should have some formal release process around it—maybe even to the point of it being a semver breaking change that requires a major release for updates (though I understand that’s a bit extreme too)