I personally like Sentry's approach more, their program focused on supporting the breadth and depth of their dependency tree rather than just the critical components https://blog.sentry.io/we-just-gave-500-000-dollars-to-open-... Disclaimer: I work for thanks.dev