> bring to light how reliant many companies are on third-party and open source code over which they have little control or visibility All the log4j code is ope

> bring to light how reliant many companies are on third-party and open source code over which they have little control or visibility All the log4j code is open. All the discussion are open. All the commit log is open. This is the case for the overwhelming majority of "open source code" projects that many companies. It's hard to see how more "control or visibility" could be reasonably enacted for a project like log4j. All you have to do is actually get involved instead of being an apathetic consumerist and then start crying when it's not all perfect.