How to professionalize the role of Open Source maintainers as the maintainer who fixed the log4j vulnerability says he works on the project in his spa