Open-Source Maintainer Scarcity Raises Systemic Supply-Chain Risk

An analysis reports that 11 of 23 critical open-source projects have only one or two regular maintainers, despite dependencies such as SQLite, zlib, core-js, and time-zone data supporting billions of devices. The xz incident demonstrates the potential impact; the issue is strategically important but does not identify a new active compromise or immediate exploit.