Package maintainers, you DO NOT OWE anybody anything. If a package you maintain is "mission critical" for a company then that company can contract you to maintain the package, companies need to stop expecting developers to work for free. How many companies that made a profit with moment.js contributed back to the project ? financially ? Personally I believe that dual licenses, one GPL, one commercial make more and more sense in the OS world.