When software depends on a project thanklessly maintained by a random guy in Nebraska, is open source sustainable?

Much of the OSS world is critically underfunded yet critically important

It's been nearly five months since the SolarWinds hack came to light, causing lots of chin-scratching about vulnerabilities in the software supply chain....