Well since it's an open source project then just have only people from safe countries publish the changes and code contribution is somewhere private. Don't include the names of anyone in the US for sure. That's the idea I'm alluding to.
Though if you wanna take it literally, you can buy the tiniest possible place as a front for your company for like 5k euros here.