Do they pay anything to the maintainers of the packages they depend on?