Tbh can just use simple packages to get most stuff done. Not really sure why they’d realistically need any open source stuff besides some super limited really tested stuff. It would be really bizarre to me to understand that yes sir indeed an enormous base of the software hub
of the country is built on top of free stuff that is of questionable quality?!?! Yikes. Someone should fix that and vet those packages asap! Aren’t there automatic linters that check for this and even tell you to fix security vulnerabilities in stale packages? And third parties that are skilled in auditing open source libraries you may want to use? Working on automation for these two would be cool product ideas or jobs.