Hi [name],
I certainly am a lead developer of libcurl, but I have no contractual agreement with either XXXX or YYYY so I do not think I can be qualified as a provider or a vendor to you. In this context, I'm but an individual.
We could arrange for a curl support contract to make me/us a provider.
@bagder What kind of requests do you get? I have a feeling a large number of them has to do with certifying various aspects of the security of the software? How about questions about whether your developers are trained?