I remember this being a problem on GitHub where developers would full on attack NPM packages that requested funding or donations in the installer.
Core-js had a really rough ride with that one, and babel (one of their main users) could not spare any development time to work on it, in the absence of the single maintainer.
It’s kind of disappointing in FOSS circles how some just refuse to acknowledge that devs need to eat - not everyone codes open source software as a side/passion project in spare time.