What is your use case? If you need a private computer to read and write you can setup a desktop with Linux and air-gap it (ZERO connectivity to the outside world, no wi-fi, no internet, nothing). Then transfer specific data in and out of it using a USB stick. That's just one example.
I had 25 million downloads on NPM last year. Not a huge amount compared to the big libs, but OTOH, people actually use my stuff. For this I have received exactly $0 (if they were Spotify or YouTube streams I would realistically be looking at ~$100,000).
I propose that we have two NPMs. A non-commercial NPM that is 100% use at your own risk, and a commerical NPM that has various guarantees that authors and maintainers are paid to uphold.
The culture made sense in the early days when it was a bunch of random nerds helping each other out and having fun. Now the freeloaders have managed to hijack it and inject themselves into it.
They also weaponise the culture against the devs by shaming them for wanting money for their software.
Many companies spend thousands of dollars every month on all sorts of things without much thought. But good luck getting a one-time $100 license fee out of them for some critical library that their whole product depends on.
Personally I'd like to see the "give stuff to them for free then beg and pray for donations" culture end.
We need to establish a balance based on the commercial value that is being provided.
For example I want licensing to be based on the size and scale of the user (non-commercial user, tiny commercial user, small business, medium business, massive enterprise).
It's absurd for a multi-million company to leech off a random dev for free.
Do you have the sales "fire power" to sell this solution?
Because it sounds like the kind of thing that governments or complicated companies would potentially buy. And they are not easy to sell to, to put it lightly.
I used to have some startup ideas that are in this category => "Most people don't need or want it, and people who do need or want it are not going to buy it from my flimsy bootstrapped startup (they will take 2 years and spend 100M with Deloitte on it instead)".
Not sure what's your situation/size/funding/scale but personally I'm happy to stay away from that category.
This usually happens because a junior dev wants to have fun and pad their resume while playing around with tech. Or they are insecure and want to make the "maximally proper" choice with everything so they appear to be an expert. For example they think storing any JSON or cache data in Postgres is somehow incorrect or forbidden and they must use something more specific to feel like they've made the correct choice.
In general Postgres will take people very far. Majority of companies could start with it and live with it forever. If they are lucky enough to need something else by that point hopefully they have enough money and staff to re-evaluate the stack and make changes for the future of the company.
It would appear that there is no sense of urgency or seriousness at the company and I assume that they might have taken the AI agent cool-aid.
Clearly that is not going so well, and it seems like they want to ruin their reputation on every incident.