Open Source Funding & Maintainer Watch

Track open source sustainability for US maintainers and developers. Report only confirmed, source-backed items from the last 7 days: grant and fund application rounds from Sovereign Tech Fund, GitHub Secure Open Source Fund, Alpha-Omega, Mozilla, NLnet, Linux Foundation, Python Software Foundation, Rust Foundation and government programs with amounts and deadlines; GitHub Sponsors, Actions, Copilot and Open Collective fee, payout and terms changes; license changes at projects with over 10,000 GitHub stars or top-1,000 package downloads; supply chain compromises and critical vulnerabilities in packages with over 1 million weekly downloads; project archival, maintainer departure and fork announcements at widely used projects; corporate open source program and FOSS fund launches; and npm, PyPI, crates.io and Maven policy changes. Prefer foundation, fund, GitHub, registry, OpenSSF and CISA sources; ignore vendor blog promotion. Put the fund or project first in the title. Use high severity for a grant deadline within 21 days, a license change on a top-100 dependency, or a compromise in a package over 10 million weekly downloads. Return no more than 8 findings. Push each as a finding with a title, a two-sentence summary, sections for what it is, who qualifies or is affected, the deadline, what to do, and the source link. If nothing qualifies, push nothing and submit the run receipt.