Yes it's in a bad state and unsustainable, especially with the recent (and welcome) focus on security these days. I wouldn't consider it broken however, that's

Yes it's in a bad state and unsustainable, especially with the recent (and welcome) focus on security these days. I wouldn't consider it broken however, that's implying an unrecoverable state. There do exist sponsored projects in the open source world which have been running successfully, though those are few and far between relative to the number of 'Nebraska' projects. Those outliers aside, consider the alternatives. The first one I can think of is to put trust in closed source software, in many cases written by MAMAA. We have enough historical evidence to know that represents a nightmare scenario that we should actively be working to get away from. That's why I agree, we should be trying to make the open source ecosystem sustainable. What I think we'll need, as a bunch of normal users, is a way to present these cases to our $workplaces, to get the funding or sponsorship in place. And an easy way for companies to do that, which slots in with their own practices.