The idea is risk reduction, not removal. An OS is backed by thousands of developers, and usually billions of dollars. Theres negligible risk that the momentum

The idea is risk reduction, not removal. An OS is backed by thousands of developers, and usually billions of dollars. Theres negligible risk that the momentum stops. If that OSS library, that is fundamental to your business, has three developers, then maybe you do have a problem.