As with earlier comments this seems to oversimplify the problem of throwing people at a problem. Adding people to a project puts more pressure on the current ma

As with earlier comments this seems to oversimplify the problem of throwing people at a problem. Adding people to a project puts more pressure on the current maintainers, to authenticate, validate, train and support newcomers. Apache has processes for this, and project maintainers pointed people in that direction repeatedly (e.g. https://github.com/apache/logging-log4j2/pull/608#issuecomment-990217634 https://github.com/apache/logging-log4j2/pull/608#issuecomme..., https://github.com/apache/logging-log4j2/pull/608#issuecomment-990264908 https://github.com/apache/logging-log4j2/pull/608#issuecomme...). The Apache foundation receives funding from a large number of organizations already: https://www.apache.org/foundation/thanks.html https://www.apache.org/foundation/thanks.html Perhaps the right question to ask here is: what did Apache do to help their members in this event? You can ask this question of the Apache foundation independently, without adding pressure on the project maintainers at this time.