What about something like: if a bug has been open for 2 months without
any apparent maintainer activity, anyone can step in and commit a fix?
How about - anybody at any time can at their discretion post a comment
in a bug asking if there are objections to committing a fix. If there is
no reply from the maintainer/project/etc in two days go ahead and do it.
Do check devaway first to see if it makes sense to wait a little longer,
and use discretion on the more critical packages.
This process is already the current policy although longer than two days
is prudent. For urgent fixes you wouldn't follow this process any way
and for others it doesn't hurt to wait.