[1]: https://openssf.org/blog/2025/09/23/open-infrastructure-is-n...
I can't find a date on this letter - is it recent?
September 2025.
So you have to increase the minimum. This could be achieved by contract, ie. not allowing free pulls like Docker have done, or by convincing companies that support PyPI and the like is the minimum. Unfortunately the latter would involve companies thinking and planning for the future, which is massively out of fashion.
Also (and ironically), in the past, this kind of stuff often did have a DEI component of its own. Meaning that a fair bit of that fund would go not to high profile projects, nor to the ones that company actually uses the most, but to whoever can put together a proposal ticking the most "diversity" boxes.
Either way, the point is that companies are simply uninterested in extending any sort of meaningful support, nevermind doing so in proportion to utility derived. And, honestly, why would they? Economically speaking there's no upside to it so long as you can enjoy the benefits regardless and rely on others to prop things up. And ethically speaking, large organizations are completely and utterly amoral in general, so they will only respond to ethical arguments if these translate to some meaningful economic upsides or downsides - and the big corps already know from experience that they can get away with things much worse than not contributing to the commons. It's not like people will boycott, say, Microsoft over its recent withdrawal of support from Python.