Reading about Keycloak and how long it is taking to patch critical vulnerabilities, I wonder is CNCF becoming how Apache was - where abandoned open source software goes to die.
replies(4):
But sure, unfortunately if not enough different companies and individiuals are maintaining stuff it gets abandoned.