A report found that open source maintainers are being asked to take on additional work to meet government and industry standards despite little pay.
https://www.securitymagazine.com/articles/99279-over-half-of-maintainers-unaware-of-new-security-standards-initiatives