For me open source is like math. You don't work on math so that people will thank you for working on math. You don't expect people using math you developed contributing back to math or paying you. You get paid however you managed to organize getting paid. And work on the math for the math and nothing else. If you have other expectations maybe you'll find other endeavours more fulfilling. Which is sad but it is what i…
Software needs to be maintained to be useful. Proofs don't. So for many, it is not the same.
Personally, I’ve shipped several open source libraries that are still in use in lots of places despite me not having added a commit in over 10 years. They do the thing, don’t do anything else, don’t depend on other stuff, and thus don’t have a lot of surface to attack.
Imagine if the log4j guys had built their thing to spit out logfiles, then stopped before adding the bit where it can execute arbitrary code. I’m sure there was a version early on that did that. And I bet that version would still work perfectly well today. It was finished.
It just needed somebody to not unfinish it.