Modern software is built on the backs of low-paid maintainers, opening the door to potential threats