Can I coin the term ‘pay per pull’ (not that I think that’s the best approach)? Perhaps you could pay with a freshly minted CommitCoin?
There was https://tea.xyz/ that does something like this, kind of, to a point, using a blockchain approach to see which packages are used. An extension of the same concept to gits would be interesting?
You charge 20 bucks for month, and from this you pay 10 straight to OSS developers and with the other 10 you hire a team to offer a N1 level of support to your customers. You could also provide a repository of "vetted software" to prevent scenarios like the xz attack.
Yeah, a central authority could potentially be beneficial if/while it's run by benevolent people.
But if it gets taken over by (say) political activism types, or just MBA types determined to treat it like a profit center, then it's going to turn to crap right about then. :(
The only way is decentralization...