Nearly half of critical open-source software relies on just one or two low-paid maintainers, opening the door to potential threats — report details critically underfunded projects that remain understaffed or unfunded Tom's Hardware