Maintainer burnout

Critical components are frequently maintained by one or two unpaid people in their own time.

That is a supply chain risk expressed as a human one. Burnout, illness or simply losing interest means an unmaintained dependency inside thousands of products, and it is also the condition that makes maintainer accounts worth stealing. Organisations depending on such components rarely contribute anything back.