> This blog post explains the serious problems the single libxml2 author > is having in maintaining the library: > > https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulnerability-reports > > There are few learnings from this: > > * libxml2 is even less production-ready than we thought > * many projects don't have the resources we do
Maybe some of the companies doing business with Postgres can chime in to let Nick Wellnhofer (the aforementioned maintainer) spend more time on libxml2 maintenance: https://opencollective.com/libxml2
Currently, looking at the OpenCollective reports, it seems USD 50 come monthly from Airbnb to libxml2's Wellnhofer. That's unlikely to pay very many bills.
