Open source package repositories are drowning. They handle 10 trillion downloads a year - twice Google's search volume - while running on volunteer labor and shoestring budgets. Now maintainers are done asking nicely: they're implementing tiered payment systems, and if you're a major cloud provider treating free repositories like your personal CDN, your free ride is ending.

Here's the problem in numbers: 82% of repository demand comes from less than 1% of IP addresses. According to Brian Fox, CTO of Sonatype, the worst offender was a department store whose 60 developers generated more traffic than global cable modem users worldwide. The reason? Misconfigured build systems pulling packages on every single compilation.

This isn't theoretical waste. This is infrastructure collapsing under commercial-scale use that nobody's paying for.

The solution being rolled out: mandatory tiered pricing. Individual developers and small teams stay free. High-volume commercial users - which mostly means major cloud providers and large corporations - will pay. Not optional donations. Not guilt-trip sponsorship buttons. Mandatory, metered pricing for heavy use.

I've seen this movie before. I've worked in open source. I've maintained libraries. And I've watched companies with billion-dollar valuations treat volunteer-maintained infrastructure as free forever because, well, it has been free.

The fundamental issue isn't that companies are cheap - though some are. It's that they've never had to think about the cost. When you <code>npm install</code> or <code>pip install</code>, packages just appear. The registry is always up. The bandwidth is always there. The maintainers keep patching security issues. All of it happens invisibly, funded by... nobody knows, honestly.

What changed? AI code generation and aggressive CI/CD pipelines pushed repository traffic into the stratosphere. Every time an AI coding assistant suggests a dependency, every time a security scanner checks a package, every time a build pipeline runs - that's a pull from the repository. Multiply that by thousands of developers at thousands of companies running hundreds of builds per day.

The numbers Fox cited are staggering. Major cloud providers account for 80% of traffic. That's Amazon, Google Cloud, , and others pulling packages millions of times per day to provision customer environments. And they've been doing it for free.