CNCF panellists discuss what if the maintainer of that vital component goes under a bus.
Some important software libraries are ubiquitous, incorporated into hundreds of thousands of applications. If you want to secure traffic OpenSSL is a very popular way to do it. If your Java application needs to output logfiles, then you use Log4J. You certainly don’t write your own.