For everyone that calls for ways to make open source more secure, or for all their magical solutions that will provide money and resources to FOSS maintainers, please read this.
This is a rare account of the reality of maintainers, things that are hard, but also how much knowledge and niche expertise you need for anything in there.
That is why just giving money to experts will not help that much. It is too hard to train experts in this. But we may make it easier
