Log4J hack raises serious questions about open-source software

Financial rewards for writing safe code and identifying flaws are too low