Does free software have academic title IX courts? Even while there may be legit complaints against someone, I'm very suspicious of FOSS governance being abused as a network of star chambers of people with a tremendous amount of influence on the security and privacy of user machines.

A metadata tag and registry of whether FOSS dependencies are governed by a non-profit and the organizations we have exposure to seems like an emerging need.