about summary refs log tree commit homepage
path: root/README
diff options
context:
space:
mode:
authorEric Wong <bofh@yhbt.net>2024-01-01 10:43:13 +0000
committerEric Wong <bofh@yhbt.net>2024-03-31 22:49:54 +0000
commitadc5c162613053d88c076e5d441b4368a97885f4 (patch)
tree4cc2cb293e6a88951ad4e9d5cbaac66d9a64c0e9 /README
parenta6000936d9004c31955a3412d9457f5967e23d73 (diff)
downloadunicorn-adc5c162613053d88c076e5d441b4368a97885f4.tar.gz
Covering my ass from draconian legislation.
Diffstat (limited to 'README')
-rw-r--r--README9
1 files changed, 9 insertions, 0 deletions
diff --git a/README b/README
index 84c0fdf..b60ed00 100644
--- a/README
+++ b/README
@@ -122,6 +122,7 @@ supported.  Run `unicorn -h` to see command-line options.
 
 There is NO WARRANTY whatsoever if anything goes wrong, but
 {let us know}[link:ISSUES.html] and maybe someone can fix it.
+No commercial support will ever be provided by the amateur maintainer.
 
 unicorn is designed to only serve fast clients either on the local host
 or a fast LAN.  See the PHILOSOPHY and DESIGN documents for more details
@@ -132,6 +133,14 @@ damage done to the entire Ruby ecosystem.  Its unintentional popularity
 set Ruby back decades in parallelism, concurrency and robustness since
 it prolongs and proliferates the existence of poorly-written code.
 
+unicorn hackers are NOT responsible for your supply chain security:
+read and understand it yourself or get someone you trust to audit it.
+Malicious commits and releases will be made if under duress.  The only
+defense you'll ever have is from reviewing the source code.
+
+No user or contributor will ever be expected to sacrifice their own
+security by running JavaScript or revealing any personal information.
+
 == Contact
 
 All feedback (bug reports, user/development dicussion, patches, pull