I have been writing this post about the economics of open source, on and off, for 13 years. I wasn't expecting to end up at "Microsoft should send corporations a huge bill" but nothing else we've tried has worked. https://seldo.com/posts/nobody-pays-for-open-source-we-can-force-them-to/
Post
seldo.comNobody pays for open source. We can force them to. | Seldo.comThirty years of voluntary funding schemes haven't paid open source maintainers because asking doesn't scale. The real money already flows — to JFrog, Docker, Sonatype — at the registry layer. The fix: registries charge companies for supply (they already do), then route a slice automatically to the maintainers who make that supply worth having.
This is an interesting premise. Potentially the hard part might be in the checks and balances around the fraud aspect you mention. Potentially setting a bar for payout, for example tie it in with package security best practices, a min package age, min number of verified dependents.
1 repost0 likes