If you take a dependency on opensource software, (as an org, tech lead), you should budget time to fix bugs in the libraries you depend on.*
* No different from when MS was the only game, except back then you had to use reflection to monkey patch internal final methods.
Post
February 24, 2021