@miss_rodent @MaddieM4 part of the difficulty of that conversation is that open source is explicitly designed to *stop* that conversation from happening, because it is annoying and expensive. you just "adopt a dependency" or "don't", you don't "establish a vendor relationship with the open source upstream".