libjpeg-turbo maintainer D. R. Commander (dcommander) declined a contributed optimization to single-pass cropped JPEG decoding, writing that a 1-3% gain is not compelling enough to justify disrupting Huffman decoding and partial image decompression code that has caused a disproportionate share of the library’s security bugs. He said Google contributed the partial-decompression feature in 2015 and that he still spends unpaid hours fixing it 11 years later, including 18 unpaid hours on issue #915, that Google has not paid a security patch reward he earned six months ago, and that the project’s General Fund is so far in debt it will not be replenished until 2028 at the current rate. After the contributor asked how to donate, Commander pointed to the project’s GitHub Sponsors page.
libjpeg-turbo maintainer declines patch, citing unpaid work and a fund in debt until 2028
libjpeg-turbo maintainer D. R. Commander (dcommander) declined a contributed optimization to single-pass cropped JPEG decoding, writing that a 1-3% gain is not compelling enough to justify disrupting Huffman decoding and partial image decompression code that has caused a disproportionate share of the library's security bugs. He said Google contributed the partial-decompression feature in 2015 and that he still spends unpaid hours fixing it 11 years later, including 18 unpaid hours on issue #915, that Google has not paid a security patch reward he earned six months ago, and that the project's General Fund is so far in debt it will not be replenished until 2028 at the current rate. After the contributor asked how to donate, Commander pointed to the project's GitHub Sponsors page.
Source: Github