I think I fully agree, although to expound on (1) I don't think that is the kind of software that any company should want to depend on for anything remotely important. I'm sure there are counter examples where you get a high quality project that doesn't require or accept donations, but I think these will be exceedingly few and far between. It seems like it's in the company's best interest to make sure the development for a dependency isn't going to go away for lack of funding?