I find myself doing this a fair amount, but there's clearly a point where you have gone too far. I consider decompiling someone else's code too far, along with taking assets that aren't yours, unless you have approval to do so. What about the developer's blog, if there is one? Surely there are other cases I haven't covered? Interested in hearing your thoughts.
For further actions, you may consider blocking this person and/or reporting abuse