There isn’t AFAIK. But In a nutshell it talks about OSS community dynamics citing the log4j exploit as an example. It seems like the same sentiment that western developers are echoing. Fostering respect and contributions from the consumers of their OSS and so on