The survey by Tidelift reveals that paid maintainers of open-source software projects demonstrate significantly higher rates of implementing critical security and maintenance practices compared to their unpaid counterparts, with a crucial 55% difference.
Among the many security practices, paid maintainers implement two-factor authentication at a rate of 76%, versus 68% for those without compensation, highlighting the importance of incentivization for better security measures.
Remarkably, the findings show that 60% of the surveyed maintainers are unpaid, suggesting a disconnect in the value recognized for critical contributions to open-source projects, with many seeking compensation.
The data also indicates that a notable portion of maintainers, specifically 25%, receive income through donation programs, while another 24% have their maintenance efforts integrated into their salaried job roles.
Collection
[
|
...
]