Edit: I'm surprised at the number of people here supporting political statements in open source. I was under the assumption that most people hated the peacenotwar module, but I guess opinions are more evenly split than I thought.
[1]: https://en.wikipedia.org/wiki/Peacenotwar
[2]: https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-pack...
..."free" doesn't mean you don't lose the respect of your users when you go off mission.
People who preach sometimes forget how often most of us are preached to, and how little we're interested in hearing some random dev's political opinion.
There are also legitimate security concerns around devs with political motivations and the willingness to leverage their projects for their agenda.
And you're free to use a different open source library.
You need their software.
You want security? Pay for it. You don’t want a political statement? Pay for it.
Equating human beings with disposable machines is one of the great sins of predatory capitalism.
Someone, some person and not a toaster, has contributed a lot of uncompensated work. It's their right to do with that work as they please.
Also, hating cryptocurrencies is not a "political" issues.
For me, that fact that huge companies flout the securities laws repeatedly over a decade is a huge red flag, and I shared this belief with people whose political beliefs are completely the reverse of mine.
I think you're the only one who is conflating the topic with this "peacenotwar" thing, and other people are only expressing an opinion on the on-topic subject?
Peace-not-war was malware, or more broadly sabotage, this is merely a statement. While both are a form of protesting and stating political stances, one is usually illegal and widely rejected while the other is protected by the UN's declaration of human rights and by the constitution of any non-authoritarian country.
The websockets library has not had anything malicious added to it. Only the lead dev says he won’t help certain users.