Corporate best practices for upstream open source contributions