To be clear, this only works for closed source projects. For an open source project, nobody will care if their code gets "held for ransom" since its already out in the open.