There are an astonishingly small number of highly underpaid under-appreciated people gatekeeping our daily software diet. Hundreds of components that builds up

There are an astonishingly small number of highly underpaid under-appreciated people gatekeeping our daily software diet. Hundreds of components that builds up free software pyramid, everything in and from Anaconda, Python binaries, numpy, pandas, jupyter, OpenXYZ are basically at the whims of some Joe whoes name you don't know, let alone the details of how they are funded or their processes. A state sponcered actor with long term goals can push malicious PRs to any one of these or become a maintainer and take over the global software infrastructure. I'm not sure how long before this grand pyramid built on such fragile security foundation crumbles up.