A lot of discussion around the #log4j situation is attempting to blame someone, maintainer, dev or big tech but don't worry #FOSS isn't broken. It's working fine for so many. Still, we should seize this opportunity to collect and discuss problems first, letting solutions come as they will.
To that end, I've created a tracker to help catalog and prove out the issues that affect free/libre open source software. https://github.com/magicstone-dev/foss-problems
All contributions welcome. Let's scope out the problems in this beautiful, massively parallel, distributed, creative, frustrating but fascinating FOSS world!