Open Source maintainers should require a $10 deposit to submit a pull request.
Even more so when there is a bounty payout.
Refundable if the PR/report is accepted.