Original link: OpenSSF warns that open source infrastructure doesn't run on thoughts and prayers / TheTegister.
It is obviously true. Everybody like to use gratis software from Maven, PyPi, npm etc., but few want to pay for the servers hosting those.