News for hackers. Stuff that matters.

A comment on Sj.h: A tiny little JSON parsing library in ~150 lines of C99. Parent comment

Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by zwnow on Sunday September 21, 2025 @02:41PM (#45325447)
So if its a hobby project designed for just a handful of people, its suddenly okay to endanger them due to being sloppy?
[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by hypeatei on Sunday September 21, 2025 @02:44PM (#45325467)
This is an open source project that you're not obligated to use nor did you pay for it. Who is it endangering?

The license also makes it clear that the authors aren't liable for any damages.

[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by flykespice on Sunday September 21, 2025 @02:52PM (#45325556)
...and what open source software license in the world makes the author liable for damages?
[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by k_roy on Sunday September 21, 2025 @03:30PM (#45325886)
Probably more of lack of explicit liability in the license.
[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by virtue3 on Sunday September 21, 2025 @04:45PM (#45326471)
every OSS license I've ever seen is "use at your own risk" essentially. That's how this whole system works.

You find a vulnerability? patch it, push change to repo maintainer.

https://xkcd.com/2347

[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by flykespice on Monday September 22, 2025 @10:37AM (#45334091)
Pretty sure the all caps text on the bottom of most open source licenses out there makes it clear
[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by Yeask on Sunday September 21, 2025 @09:58PM (#45328394)
None. That is how RedHat makes money.
[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by account42 on Tuesday September 23, 2025 @09:59AM (#45347166)
> The license also makes it clear that the authors aren't liable for any damages.

The license disclaims liability but that doesn't mean the author cannot ever be held liable. Ultimately, who is liable is up to a court to decide.

[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by nkrisc on Sunday September 21, 2025 @03:13PM (#45325735)
The code nor author don’t endanger anyone. Whoever uses it inappropriately endangers themselves or others.

Why are you using random, unvetted and unaudited code where safety is important?

[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by Yeask on Sunday September 21, 2025 @09:55PM (#45328383)
Open Source is about sharing knowledge.

They are sharing their knowledge about how to create a tiny JSON parser. Where is the problem again?

[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by zwnow on Monday September 22, 2025 @02:12AM (#45329648)
Refer to the original comment. Seems like you are incapable of connecting the comment chain.
[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by Yeask on Monday September 22, 2025 @07:38AM (#45332026)
Have some manners please.
[ Parent | on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of... by tossaway0 on Sunday September 21, 2025 @11:19PM (#45328790)
Yes, pretty much. It has enough of a warning.
[ Parent | on HN ]