Elektrine lite

← Feed

@leaverou@front-end.social

2025-09-01 09:50 UTC

This is excellent. 👌🏼 “Open source, the thing that drives the world, the thing Harvard says has an economic value of $8.8 trillion. Most of it is one person. And […] not one of those single person projects have the proper amount of resources they need. If you want to talk about possible risks to your supply chain, a single maintainer that’s grossly underpaid and overworked.” Yuuup. Baffling how so many companies depend on open source software without funding it, ever. https://opensourcesecurity.io/2025/08-oss-one-person

Replies (6)

  • @leaverou@front-end.social Feels a bit misleading. The headline suggests that the same single person makes most of open source.

    Open ##2450851

  • @letterror@typo.social 2025-09-01 12:55

    @leaverou@front-end.social @ollicle@mastodon.social I have observed this. Very large companies even. Who, possibly, have learned they can put considerable pressure on these single person projects. “Would be a shame if we would be forced to fork your project… So why don’t you implement all the things we need?”. For free, obvs, because of course we all share equally in the great bountiful world of open source.

    Open ##2450885

  • @madbob@sociale.network 2025-09-01 14:15

    @leaverou@front-end.social https://apt.gives/

    Open ##2450895

  • @leaverou@front-end.social it's not so baffling considering how component selection looks in companies, at least the ones I worked for. It's engineer-driven, so the programmers get to choose what they'll use. We look at popularity, dating of releases, we're also limited to certain licenses, cannot use libraries with known vulnerabilities. That's it. There's no formal process for supporting these libraries. There's one for purchasing, but it takes months to complete, so it's much faster to use free stuff.

    Open ##2450900

  • @katanova@retro.social 2025-09-01 18:10

    @leaverou@front-end.social "Most open source maintained by one person" actually just statistical error. overcommit georg, who lives in a cave & makes 100,000 git commits per day to abandoned forks, is an outlier adn should not have been counted.

    Open ##2450902

  • @leaverou@front-end.social even in big companies , some parts of code have not many maintainers

    Open ##2450905