Hacker News Reader

I don't think anyone can force them to fix cve. Software is provided as-is. Can't be more straightforward as that.

This is technically true, but not plausible in the social sense.

Why not. I can't force you to do your volunteering work.