The entire cdnjs is one dude plus some "core" maintainers with no access? Amazing.
I mean even the Linux Kernel was maintained like that a few years ago.
And then some committee came along and thought everything was crap and they'd do it better. Featuring ESR: https://lwn.net/Articles/713901/
An Internet without a reliable way of figuring out the true time would be... messy.
Shortly after heartbleed it turned out openssl was funded by a couple of developers doing enhancements as contracting work and $9000/yr in donations despite being relied on by most of the internet.
Heartbleed [2] was a bug in OpenSSL disclosed in 2014, which had very severe security implications.
Subsequently, people noticed OpenSSL typically receives about $2,000 in donations a year and has just one employee who works full time on the open source code. [3]
[1] https://crocs.fi.muni.cz/public/papers/acsac2017 [2] https://en.wikipedia.org/wiki/Heartbleed [3] https://arstechnica.com/information-technology/2014/04/tech-...