When you're talking to an open source dev, just remember that they are literally giving you their time for free, and they are people who don't like to be treated poorly.
Edit: Just to be clear, I don’t mean any ill will toward the guy. He’s frustrated and he’s just taking it out in the wrong venue at the wrong people, but that doesn’t mean he’s a bad person.
Edit 2: The reinstalling he’s talking about is NPM. So just running npm install. It’s because he tried removing the node_modules directory, which is a reasonable thing to do, but it means you need to reinstall the modules with that command.
You are entitled to the truth. If the dev knows their software could have very damaging effects then that should be front and center on the software page.
Usually it is? But ultimately it's still your own responsibility. You did not pay the dev, the dev does not ask you to pay them, ergo the dev owes you diddly squad.
Let's be decent with each other, I don't think my expectations are outrageous. I consider decent to make sure that the person that will use your software is aware of the dangers. And the best person to know those dangers is usually the dev.