the previous head of security on golang left a year or so ago to work as a full-time oss maintainer and has an interesting model for making money. https://words.filippo.io/full-time-maintainer/