Great writeup on an important topic.

I like the NLnet/German Sovereign Tech fund model that has emerged in the last few years. Maintainers go and apply for funds from these disbursers. The disbursers are not a software registry, instead their role is to provide accountability and traceability for taxpayer money to fund public internet infrastructure. My experience working with NLnet has been very positive.

I agree with the fine article's criticism that most companies don't pay, but also I think that's not as pressing of problem so long as tax-based funding is in place.

I love this idea, but I’m not sure how this would work if a company has something like an internal jfrog caching / proxy layer.