Everyone's happy to get software in exchange for nothing from a project with only a handful of people working on it, until there's a problem in the code that is a real bear and causes massive vulnerabilities, and on a long enough horizon, that will happen to any sort of code running on machines connected to the internet.

If your entire business model relies on that code, it'd be wise to back the project, even with token support. I'm talking about less than cost of one team building outing.