If companies who use open source orgs have some obligation or at least motivation to support the maintainers of the the projects- do they even know who the maintainers are?
Anyhow feels like we need more tools that are like `poetry show --tree` but would return all the people and orgs that the tree of dependencies represents. I mean, if you ran that you got back "They're all dead. Everybody's dead, Dave." would that change your plans?