A reflection on the open source sustainability problem, prompted by a FOSDEM talk covering incidents like left-pad, event-stream, and heartbleed. The core argument is that developers and organizations who depend on hundreds or thousands of libraries they've never examined are creating the conditions for these failures themselves. The author advocates for knowing your dependency graph deeply, engaging personally with maintainers, and treating open source as a community of people rather than a collection of black-box utilities.
