Of course there are still bug reports and fixes without financial compensation. The proof is all of open-source, including cURL.