GoKawiilReport finds critical open-source projects run by one or two unpaid maintainers
A new report from The Data Drop examined 23 widely used open-source software projects and found 11 of them have only one or two active maintainers, often working without pay or adequate funding. The report cites past incidents like Shellshock, ImageMagick's exploited vulnerabilities, Log4Shell, and the libwebp zero-day as examples of how thinly staffed, ubiquitous code can produce major security failures.