How do open-source software stewards demonstrate that they meet their obligations?