This is why I have trust issues with using open source projects which aren’t supported by companies. While he isn’t wrong I think there were much better ways to handle this.
Source: Open source developer corrupts widely-used libraries, affecting tons of projects – The Verge