The Tidelift guide to working managed open source