Sorry - I wasn't clear. I meant there's no point talking the way you were about how businesses should pay the people "actually" creating the value. All sorts of

Sorry - I wasn't clear. I meant there's no point talking the way you were about how businesses should pay the people "actually" creating the value. All sorts of people create value, and if your business has some volunteers willing to give you work for nothing, you shouldn't assume they did all the work and are the sole ones who should've been paid all along. I agree that it's a good idea to de-risk your supply chain. The problem is a lot of OSS is popular because it's free, and often there isn't a stable business backing it that an org could have confidence in giving money to. If you're just donating to a GitHub account there's still no likelihood that the project will stick around.