Unpaid Maintainers: The Security Threat No One Is Talking About Yet - Understanding Open Source Security Risks

Learn about the critical security implications of unpaid open source maintenance in this 28-minute conference talk from OpenSSF. Explore the challenges faced by open source maintainers in 2024, where 60% remain unpaid and 58% have considered abandoning their projects. Examine the xz utils security incident as a case study highlighting the risks of unsupported maintenance. Discover how lack of financial, community, mental health, and training support for maintainer hobbyists directly impacts organizational security. Gain practical tips for security-conscious leaders to mitigate risks associated with under-maintained open source packages. Understand the positive security outcomes and project health benefits that result from properly compensating maintainers for their essential work.