{
  "id": 15744422,
  "title": "Modern software is built on the backs of low-paid maintainers, opening the door to potential threats",
  "url": "https://urgent.news/2026/10/20/modern-software-is-built-on-the-backs-of-low-paid-maintainers-opening",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-20T12:10:00.000Z",
  "source": {
    "name": "Tom's Hardware",
    "slug": "tom-s-hardware",
    "url": "https://www.tomshardware.com/tech-industry/cyber-security/modern-software-is-built-on-the-backs-of-low-paid-maintainers-opening-the-door-to-potential-threats-report-details-critically-underfunded-projects-that-remain-understaffed-or-unfunded"
  },
  "original_language": "en",
  "account": "Open-source software forms the backbone of modern computing, yet the individuals who maintain these crucial projects often operate under dire financial circumstances. A recent report analyzing 23 critical open-source projects reveals that 11 of them currently possess only one or two maintainers, with funding frequently either scarce or nonexistent. This leaves room for potential vulnerabilities and threats, as the impact of inadequate oversight can be catastrophic when these widely-used software components are compromised. The history of past vulnerabilities, like Heartbleed, Shellshock, and recently Log4Shell, demonstrate the severe consequences of underfunded and understaffed projects. In specific instances, maintainers like Chet Ramey, Dirk Lemstra, Paul Eggert, and Behdad Esfahbod have been forced to handle massive workloads alone, often without financial compensation or recognition. Despite the challenges, some projects, such as curl, Log4j, and OpenSSL, have received funding from industry players, suggesting that investment in these essential software components is not only warranted but could also serve as a preventive measure against potential security threats.",
  "summary": "Modern computing remains vulnerable to the low bus factor of many open-source projects — continued lack of funding and manpower for voluntary-maintained infrastructure makes for a perennial threat",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}