@raven667 @hughsie @drwhax EU is attempting parts of this. We'll see about how the realexisting version of this will turn out.
Other than that: Ensure awareness for said corporates by enforcing the existing rights on the components they use.
There'll probably have to be some sort of enforcement threshold or staggered requirements.
And a large part of it is probably to just answer to requests for features/fixes/... with "pull request welcome" or "here's my hourly rate" to any corporate requests.
Unfortunately, this is not trained for.