Reflecting on the log4j problems from last year, as a representation of what we should expect from open source projects, and from ourselves. https://www.darkreading.com/attacks-breaches/neglecting-open-source-developers-puts-the-internet-at-risk