He doesn't have to do anything, but I absolutely hate whenever developers who work on community used projects (paid or not) act like the project is means nothing to them, act all snarky whenever 1 out of like 10k of their users critiques or suggest something about the project that they don't like, and act as if their users are subhuman and mean nothing.
My examples are the event-stream dev who carelessly gave away their project to some random person and that person happened to be malicious. I cannot believe people in the community not only defended this dev, but also cheered them on for putting thousands of enterprise applications at risk because they were lazy. People even commented on how Node / NPM is a terrible system because it allowed this to happen... While yes, it is a bad system, the developer was pretty much the sole reason this happened, they should have some moral responsibility for basically fucking a bunch of people over for nothing more than "they didn't care". If everyone was as careless as this dev, I have a hard time thinking that society would function. Not everything is about "can I legally do this".
Just because you're volunteer, or are doing it for yourself, the moment you release it, other people start using it, you have to have some modicum of responsibility for your work, ethically, morally, even if it's not legally.
No. I'm not talking about legal responsibility. I don't need to see the one-thousandth post about opensource license basically giving devs the ability to turn their software malicious. I'm saying ethically / morally you have some responsibility to not intentionally harm active users using your project.
Another case is the Skyrim Together / Online, where people are paying devs 18k-30k a month, and because some users critiqued the development about them stealing code, they wrote that they can cancel the project at anytime, delete the code, and that they don't owe anyone anything. This is obviously a worse scenario because they're being paid so much money, but it's still along the lines that developers work on a community project, and act as if all the people that put trust into them, supported them, mean nothing and are just subhuman trash who can go die in a waste fire.
Basically what I'm saying is, if you open a project to the world, and someone makes a post critiquing something about it, or asking a feature addition (in a nice way), the very fucking least you can do is not act like a stuck-up jerk. If you release and maintain a project (even if it's licensed FLOSS and you don't get paid), I think you have a modicum of moral responsibility to not actively treat your users like shit, not harm them intentionally, and not through apathy put them at risk just because you are done working on it.
Maybe I'm crazy for expecting devs who work on widely used projects to act somewhat professionally, even though legally they don't have to, but I just can't wrap my head around why people defend all these jerk devs because "they don't owe you anything", when it's much more than that.