

An issue I’ve seen brought up in the open source community is that they have audits that look at the number of untriaged issues and time to resolve serious issues that their funding depends on.
I’m in software, but not open source, so it seems like they don’t have someone aligned with their team who they can sit down and say “either we need more resources, cut scope for new features, or accept quality / security issues coming up” to, its kind of this weird game of politics they end up needing to play to get any kind of funding for full time maintainers.
That’s the main reason they can’t just ignore issues that come up in their backlog, especially security ones.








That’s it? That’s like an upper middle class boomer’s retirement fund. I presume much of the compensation is going to be in diplomatic concessions.