5 points
Sure. But if the project in question only has one or two donation methods and none of those are supported by the company, then the company can’t easily donate anything. Companies usually have a strict way of how they can donate and it usually entails Paypal or some other costly solution, while projects like that likely just has a patreon or LibrePay option and perhaps a crypto wallet. Most companies can’t work with that.
In my opinion it is a terrible choice for a company to rely on a dependency like XZ, especially maintained by one person as a hobby, without being able to meaningfully contribute to the maintenance themselves. I just don’t think I can be sympathetic to a company having to maybe bend a rule or two to donate.
