Filippo Valsorda @filippo.abyssdomain.expert on X: "No one is paying the log4j2 maintainers!? There is a whole page on the responsibilities of a @TheASF "Project Management Committee"... AND NO ONE IS PAYING THEM? https://t.co/JXimIQLxw5 Open Source needs to grow the hell up. Yesterday. https://t.co/tQpITt8vn3" / X

Post

Filippo Valsorda @filippo.abyssdomain.expert
@FiloSottile
No one is paying the log4j2 maintainers!? There is a whole page on the responsibilities of a @TheASF "Project Management Committee"... AND NO ONE IS PAYING THEM? apache.org/dev/pmc.html Open Source needs to grow the hell up. Yesterday.
Volkan Yazıcı
@yazicivo
Dec 10, 2021
Log4j maintainers have been working sleeplessly on mitigation measures; fixes, docs, CVE, replies to inquiries, etc. Yet nothing is stopping people to bash us, for work we aren't paid for, for a feature we all dislike yet needed to keep due to backward compatibility concerns.
10:58 PM · Dec 10, 2021
Filippo Valsorda @filippo.abyssdomain.expert
@FiloSottile
Dec 10, 2021
This is the maintainer who fixed the vulnerability that's causing millions(++?) of dollars of damage. "I work on Log4j in my spare time" "always dreamed of working on open source full time" "3 sponsors are funding @rgoers's work: Michael, Glenn, Matt" People, what are we doing.
Filippo Valsorda @filippo.abyssdomain.expert
@FiloSottile
Dec 10, 2021
The market rate of a developer who can maintain a large open source project is at least $300k/yr. (Conservatively, check levels.fyi.) The most I've seen someone rack up on GitHub Sponsors and Patreon is like $1,000/month. You see the problem?
Filippo Valsorda @filippo.abyssdomain.expert
@FiloSottile
Dec 12, 2021
👋 Hi! If you've made it to this thread via Twitter's algorithmic preference for outrage and 280-character complaints, you might want to know that I also wrote 1,000 words about one possible way out of this. (It's like a SoundCloud, more or less, right?)
Filippo Valsorda @filippo.abyssdomain.expert
@FiloSottile
Dec 11, 2021
We all agree the status quo is unsustainable. Here are 1,000 words on how we could get the role of Open Source maintainer to graduate to a real, properly paid profession. The thing is, companies need it as much as maintainers do. blog.filippo.io/professional-m…
GGreg
@GGreg
Dec 10, 2021
This @xkcd comic is all too real for too many projects.