As of yesterday, there were a grand total of three sponsors for this person's work. THREE. As of today, this number is now 14; however this is no excuse. This person should be funded in a level that is appropriate for how critical log4j2 is used in the ecosystem. There is no excuse for this. This person's spare time passion project is responsible for half of the internet working the way it should. Vulnerable companies to this issue included Apple, Google, my cell phone carrier and basically everyone that uses JavaEE in its default configuration.

"Open Source" is Broken