Hive Project warns that modern dependency trees concentrate risk in a small number of unpaid or burned-out maintainers and centralized registries, urging companies that depend on open-source libraries to fund maintainers and prefer foundation-backed projects.
Open Source, Closed Loop: How the Tools We Trust Are Quietly Centralizing Again
Hive Project warns that modern dependency trees concentrate risk in a small number of unpaid or burned-out maintainers and centralized registries, urging companies that depend on open-source libraries to fund maintainers and prefer foundation-backed projects.
Source: Hive Project