Well, it's interesting that anyone would be concerned about (1) meanwhile probably 99% of open source projects use e.g. github, bitbucket, gmail, etc...
If it's an open source project then shouldn't everything be out in the open anyways? If that's not the case then it implies it's a private project in which case there should be a budget...
Maybe Im wrong though?