

Yeah I’m 100% sure they are doing this A) for good PR (blender is a beloved app and funding them is awesome) b) to retain communication with the team for easier agent integration later c) to lobby for their AI.
I can totally understand that it doesn’t look great if blender accepts the money.
I am sure though that blender could probably need the money; open source software is criminally underfunded and those devs need money to survive at the end of the day.







It really depends on if you think this is a genuine exploit or not. If it is, look up Microsoft’s track record on complying with disclosure and make yourself familiar with responsible disclosure guidelines.
If it’s not then you just need to look into the EULA of the specific windows parts affected, so they don’t pull your repository. Because that’s usually the biggest thing they do if you don’t specifically start fights with these companies.
Generally, you’re probably fine. If you want me to look over it I can give you my discord or fluxer or whatever. Not an expert, just a Cybersecurity enthusiast.