That might be an issue for smaller projects but at larger scales there is often an associated charity. For example https://apache.org/ and https://numfocus.org/community/mission are both 501(c)(3) registered charitable organizations.