[rob74]

> I don't see much analysis of where this entitlement comes from

Might I propose one possible reason? Take, for example, the Node.js ecosystem. Someone, a while back, built some library, added it to npm, then people used that module in their projects (maybe as a dependency of another module), along with thousands of other modules, and built an application on top of it. So they don't even really know that they are using the project, have no idea about who contributed to it, never saw its page on GitHub etc. Then, maybe years later, when the project is abandoned and flagged as risky by various codebase scanning tools, some poor developer (who maybe wasn't even involved in the initial decision of using Node for the project) will have to find an alternative for the module (and possibly others that depend on it and are also unmaintained). So maybe in this case it's frustration rather than entitlement?