There's a whole old elephant in the room, but we're not really talking about it because it's an elephant everyone loves to hate. And yet.
This is a model that MPAA and RIAA use. And their equivalents in countries that have functional copyright legislation. Most first world countries have one. Don't get me wrong, they are mostly rent-seeking racketeers, but if you try to weasel out of paying for stuff you're using for your own profit, you're bound to get one.
Either some law pertaining to maintenance of "digital commonwealth" or some other nice name is passed in enough countries so other countries have to follow suit if they want to be in good company, and organizations with teeth, one per country, are set up to make sure the "digital commonwealth" tax is collected from everyone, big and small. They will even distribute money among creators, by usage or something.
Microsoft would probably love to be such an arbiter. They have Github. They have all the stats. They know if your company had been naughty or nice, how many times they downloaded your stuff, and how many times their employees were demanding shit in issues. It's child's game to join the party, just have an account with them.
Or we just piggyback on the existing copyright legislation and give RIAA and their likes more power and custody of making sure OSS maintainers don't starve. They will surely protect their interest with eagerness, who wouldn't like more profit?
Of course, companies will try to fight tooth and claw. They will tell you all sorts of doomsday scenarios, how the poor megacorporations won't be able to afford it, how they will have to raise your subscription fees. Gee, haven't we seen those crocodile tears when free roaming in EU was going to be established? We also know how it ended: they all sucked it up, complied, maybe their profits took... well... not a hit, but a nudge maybe. Companies who have to buy music know how to pay the music tax to copyright racketeers. They will get used to that.
They will also be happy to pay just one entity and be done with it. And if you dare start a company using F/OSS, you're in for the largest financial hit. The little man always suffers the most in such schemes.