Open Source Endowment – ​​nyu fɔnd sɔs fɔ opin sɔs mentenɛns

"Wi dɔn bil di dijital ikɔmi pan fawndeshɔn fɔ volontia leba ɛn kɔl am 'kɔmyuniti.' Sɔntɛnde, di kɔmyuniti kin taya. Endowments na aw yu de mek gratitude strɔkchɔral instead ɔf aspirational."

Di biznɛs kes fɔ kɔpɔt patisipeshon na opin sos ɛndawmɛnt rili strɔng pas aw bɔku faynans tim dɛn no. Wan 2023 Havad Biznɛs Skul stɔdi bin ɛstimat di ikɔnomi valyu fɔ opin sɔs softwe we dɛn kin yuz bɔku bɔku wan na $8.8 trilyɔn — valyu we kɔmni dɛn kin akses fɔ fri bɔt we dɛn nɔ kin pe fɔ in prodakshɔn. Fɔ kɔntribyut to ɛndawmɛnt nɔto charity; na infrastrakcha mentenɛns we dɛn mek lɛk se na filantrɔpi.

Aw Dɛn De Disayn Ɛndawɔm Strukchɔ

Di ɛndawmɛnt mɔdel dɛn we de kam fɔ opin sɔs difrɛn pan strɔkchɔ, bɔt sɔm dizayn prinsipul dɛn de jɔyn rawnd wetin rili de wok:

we dɛn kɔl
• Indipɛndɛns frɔm kɔpɔt gɔvmɛnt: Di mɔs funkshɔn mɔdel dɛn de separet di dona dɛn frɔm di disizhɔn-mɛkin. Di wan dɛn we de kɔntribyut kin gi mɔni fɔ di ɛndawmɛnt bɔt dɛn nɔ kin gɛt vot pan us prɔjek dɛn kin gɛt distribyushɔn.
• Transparent alɔkeshɔn algɔritm dɛn: Projɛkt dɛn lɛk FOSS Fɔnd dɔn ɛkspiriɛns wit wokman-nominɛshɔn mɔdel dɛn; ɔda wan dɛn de yuz dipɛnsin grafik analisis fɔ weit fɔnd to prɔjɛkt dɛn we gɛt di brayt dawtstrim impak.
• Yuz fɔ di mɔni we di mentenɛns de difayn: Ifektiv ɛndawmɛnt nɔ de ataya string to distribyushɔn. Di wan dɛn we de mek di say dɛn we dɔn pwɛl kin yuz mɔni fɔ dɛn tɛm, fɔ du sikyɔriti ɔdit, fɔ mek dɛn rayt di tin dɛn we dɛn dɔn rayt, ɔ jɔs as kɔmpɛnshɔn fɔ di ia dɛn we dɛn dɔn wok bifo.
• Mɔlti-ia kɔmitmɛnt winda: Kɔpɔreshɔn dɛn we kɔmit to ɛndawmɛnt tipikul fɔ du am pan 5-10 ia ɔrayzɔn, we de gi di planin stebiliti we wan ia spɔnsɔship saykl nɔ kin ebul.
• Ikosistim-lɛvel tinkin: Di bɛst ɛndawmɛnt strɔkchɔ dɛn de fɔnd nɔto jɔs mak projɛkt bɔt di lɔng tel fɔ yutiliti dɛn we pipul dɛn nɔ no bɛtɛ we de ɔndapin dɛn — di kayn prɔjek dɛn we gɛt 50 GitHub sta ɛn 40 milyɔn dawlod ɛvri wik.

Di Sovereign Tech Fund, we di Jaman gɔvmɛnt de bak, dɔn sheb pas €26 milyɔn to opin sos infrastukchɔ frɔm 2022 ɛn i ripresent wan gɔvmɛnt-lid vɛshɔn fɔ dis mɔdel. Insay Amɛrika, di Open Source Security Foundation (OpenSSF) dɔn atrak pas $150 milyɔn pan kɔmitmɛnt frɔm Google, Microsoft, Amazon, ɛn ɔda wan dɛn — we de wok lɛk haybrid bitwin dairekt fɔnd ɛn tru ɛndawmɛnt.

Di Kɔpɔt Kɔlkyulɛshɔn: Wetin Mek Naw

Sɔmtin shift na kɔpɔt atitudi afta wan string ɔf ay-prɔfayl sapɔt chen atak. SolarWinds insay 2020, Log4Shell insay 2021, ɛn di XZ Utils bakdo insay 2024 — usay wan neshɔn-stet aktɔ spɛn tu ia fɔ kɔltiv trɔst as fek opin sɔs kɔntribyushɔn bifo i plant bakdo — mek sikyɔriti tim ɛn CFO dɛn pe atɛnshɔn di we dɛn we dɛn nɔ bin dɔn pe atɛnshɔn bifo. Di XZ Utils insidɛnt patikyula bin chill bikɔs i bin nia fɔ sakrifays ɛn bikɔs i bin ɛksplɔyt di ɛksaktɔ vulnerability we ɔndafunded opin sɔs de kriet: mentenɛns dɛn bin bɔn aut inaf fɔ wɛlkɔm ɛp frɔm strenja dɛn.

Di SEC in nyu softwea sapla chen disklɔshɔn rikwaymɛnt, we go wok fɔ pɔblik kɔmni dɛn, dɔn ad rigyuletɔri prɛshɔn. Naw kɔmni dɛn gɛt fɔ tink sistamatically bɔt dɛn opin sos dipɛnsin nɔto jɔs fɔ injinɛri rizin bɔt fɔ ligal ɛn kɔmplians rizin. Dat tinkin naturally lead toward ask: wetin na di failure risk of dis dipεndεns dεm, εn wetin i go kכst fכ mitigate am? Ɛndawɔm patisipeshon de apia mɔ ɛn mɔ na di "risk mitigation" kɔlɔm na da analisis de, nɔto jɔs di "nays fɔ gɛt" kɔlɔm.

Fɔ kɔmni dɛn lɛk Mewayz — we de wok akɔdin to 207 intagreted biznɛs mɔdyul dɛn we de sav pas 138,000 yuza dɛn ɔlsay na di wɔl — di opin sɔs stak nɔto insidɛntal; na fawndeshɔn. Ɛvri layt na wan mɔdan biznɛs OS, frɔm database injin to ɔthɛntishɔn laybri to pemɛnt prɔsesin SDK, de tɔch opin sɔs. Plɛtfɔm dɛn we dɛn bil pan dis skel gɛt ɔl tu strɔkchɔral intres pan opin sɔs stebiliti ɛn reputeshɔn chans fɔ bi fɔs patisipan dɛn pan ɛndawmɛnt mɔdel dɛn we de signal lɔng tɛm ikɔsistɛn stiwɔdship.

Wetin Mentɛna dɛn Rili Nid (I Nɔto Jɔs Mɔni)

Di tɔk bɔt opin sɔs fɔnd bɔku tɛm kin kɔlap to "jɔs pe mentenɛns mɔ," bɔt di rialiti na grɔn na mɔ nuans. Bɔku mentenɛns dɛn we de gɛt fɔnd tru pletfɔm dɛn lɛk GitHub Spɔnsɔ dɛn ripɔt se di mɔni nɔmɔ nɔ de adrɛs dɛn praymari pen pɔynt dɛn. Bɔn ɔt, bɔda-sɛtin, kɔntribyushɔn manejmɛnt, ɛn gɔvmɛnt kɔmplisiti na ikwal impɔtant barɛri fɔ sataynabul mentenɛns.

Di ɛndawmɛnt dizayn dɛn we dɛn tink bɔt pas ɔl dɔn bigin fɔ akɔntayn dis. Di risach we di Plaintext Group du pan di mentenɛns wɛlbɔdi biznɛs dɔn sho se di mentenɛns dɛn kin kɔnsistɛntli rank dɛn tin ya as dɛn tɔp nid dɛn:

we dɛn kɔl
1. Inkam we pɔsin kin abop pan, we kin kam bak pas fɔ gi mɔni wan tɛm
2. Ɛp wit administretiv ɛn gɔvmɛnt wok, nɔto jɔs kɔd kɔntribyushɔn
3. Sikyuriti ɔdit fɔnd we nɔ nid di mentenɛns fɔ bi sikyɔriti ɛkspɛkt
4. Ligal sɔpɔt fɔ laysens kwɛstyɔn ɛn kɔmplians kwɛshɔn
5. Mɛntal wɛlbɔdi risɔs ɛn kɔmpin kɔmyuniti wit ɔda mentenɛns

Endowment we dɛn strɔkchɔ wit dis ɔndastandin de muv pas pure cash distributions to wetin dɛn kin kɔl services endowments — mɔdel usay di fund kɔntrakt spɛshal ɛp pan bihaf fɔ prɔjek pas fɔ jɔs rayt chɛk. Di Tidelift mɔdel dɔn pɔynt dis dairekshɔn, pan ɔl we di wan dɛn we de kɔmɛnt notis se i stil de abop pan ɛni-sabskriptɔ rɛvɛnyu pas tru tru ɛndawmɛnt mɛkanik.

Bil di Infrastrakcha fɔ Pɛrpɛtual Opin Sɔs

Di prɛktikal chalenj fɔ impruv ɛndawmɛnt na skel na institiushɔnal, nɔto faynɛns. Fɔ sɛt ap wan ligal saund ɛndawmɛnt strɔkchɔ nid fɔ gɛt fawndeshɔn stetmɛnt, invɛstmɛnt polisi stetmɛnt, kɔnflikt-ɔf-intɛres gɔvmɛnt, ɛn distribyushɔn krayteria — di kayn ɔganayzeshɔnal ɔvahɛd we bɔku pan di opin sɔs prɔjek dɛn spɛktakular ill-ɛkwip fɔ manej. Dis na di say we intamɛdiɛri ɔganayzeshɔn dɛn kin bi impɔtant.

Sɔm nɔ-profit dɛn de posishun dɛnsɛf as ɛndawmɛnt infrastukchɔ prɔvayda dɛn — ɔganayzeshɔn dɛn we de aksept kɔntribyushɔn, ol ɛn invɛst di kapital, ɛn sheb ritɔn akɔdin to krayteria we dɛn gri, so wan wan prɔjek dɛn nɔ nid fɔ bil dis kapasiti dɛnsɛf. Di Sɔftwɛl Fridɔm Kɔnsɔvɛns, NumFOCUS, ɛn di Ɛklips Fɔdayshɔn ɔl gɛt ɛlimɛnt dɛn fɔ dis kapasiti, pan ɔl we nɔbɔdi nɔ dɔn lanch yet wan ful fɔmaliz pɔrpɛtual ɛndawmɛnt prodak we smɔl smɔl prɔjek dɛn kin jɔyn izi wan.

Di divɛlɔpmɛnt we prɔmis pas ɔl kin bi di we aw di on-chen ɛndawmɛnt ɛkspiriɛns dɛn de kɔmɔt na di Ethereum ikɔsistɛn, usay smat kɔntrakt dɛn kin ɛnfɔs distribyushɔn lɔ dɛn wit mɛtemat prɛsishɔn ɛn kɔmplit transparency. Gitcoin in kwadratik fɔnd ɛkspiriɛns, pan ɔl we nɔto ɛndawmɛnt insay di strikt sɛns, dɔn payɔnia di gɔvmɛnt tinkin we go infɔm dɛn dizayn ya. Wan prɔpa strɔkchɔ on-chen ɛndawmɛnt kin tiorikali pul mɔtalman diskrɛshɔn frɔm distribyushɔn ɔltogɛda, alɔkat fɔnd bays pan dipɛnsin grafik, sikyɔriti ɔdit stetɔs, ɛn mentenɛns aktiviti signal — ɔtomɛtik ɛn ɔltɛm.

Di Rod we de bifo: Frɔm Aspirashɔn to Akitekchɔ

Di opin sos ɛndawmɛnt muvmɛnt stil de ali, bɔt di trajektɔri klia. Di kɔmbaynshɔn fɔ rigyuletɔri prɛshɔn, sikyɔriti insidɛnt, ɛn di kɔpɔt sofistikieshɔn we de gro bɔt sapɔt chen risk de mek kɔndishɔn fɔ rial kapital fɔmɛshɔn. Di kwɛshɔn na if dɛn kin bil di institiushɔnal infrastukchɔ fast fɔ kech da kapital de bifo i skata to ɔda we dɛn we nɔ gɛt bɛtɛ strɔkchɔ.

Fɔ di brayt tɛknɔlɔji industri, di stej dɛn de go fa fawe pas di opin sɔs kɔmyuniti sɛf. Di prodaktiviti rivɔlɔshɔn we sɔftwɛl dɔn deliv ova di pas 30 ia na sɔbstanshal wan divɛdɛnt pan opin sɔs invɛstmɛnt — invɛstmɛnt we dɛn mek mɔ bay wan wan volontia dɛn we nɔ gɛt ɔlmost natin in ritɔn. εndowmεnt dεm riprizent di belated bכt nεsεsary rεkכgnishכn se dis mכdel, pan כl we i rεmarkabl, i nכ sataynabl witout strכkchכral sכpכt.

Kɔmpani ɛn pletfɔm dɛn we de tek pat kwik kwik wan pan ɛndawmɛnt strɔkchɔ dɛn we dɛn dɔn disayn fayn fayn wan go de mek bet we nɔ de pe fɔ prɛs rilis bɔt na sɔntin we go de fɔ lɔng tɛm: di kɔntinyu fɔ de ɛn di sikyɔriti fɔ di softwea ɛkosistim dɛn we dɛn biznɛs de dipen pan. Insay di wɔl usay di dijital ɛn fizik ikɔmi de ikwal mɔ ɛn mɔ, dat nɔto filantrɔpi. Dat na infrastrakcha mentenɛns. Ɛn infrastukchɔ, lɛk aw ɛni injinia go tɛl yu, nɔ de mentɛn insɛf.

Kwɛshɔn dɛn we dɛn kin aks bɔku tɛm

Wetin na Open Source Endowment ɛn aw i difrɛn frɔm tradishɔnal spɔnsɔship?

Open Sos Ɛndawɔm na lɔng tɛm fɔnd mɔdel usay dɛn de invɛst kapital ɛn na di ritɔn nɔmɔ dɛn de sheb to di wan dɛn we de mentenɛns — we de gi stebul, rikɔrɛkt inkɔm pas fɔ gi wan tɛm doneshɔn. Nɔ lɛk tradishɔnal spɔnsɔship we kin dɔnawe wan nɛt, ɛndawmɛnt de mek faynɛns indipɛndɛns, we de alaw divɛlɔpa dɛn fɔ pe atɛnshɔn pan sikyɔriti, kwaliti, ɛn lɔng tɛm sastaynabiliti we dɛn nɔ de chas shɔt tɛm kɔpɔt gudwil.

Wetin mek biznɛsman dɛn fɔ bisin bɔt fɔ gi mɔni fɔ di opin sɔs laybri dɛn we dɛn de dipen pan?

Ɛvri mɔdan biznɛs stak de silent wan de abop pan opin sɔs kɔd. We wan krichɔ vulnerability kɔmɔt na laybri we dɛn nɔ de kia fɔ, di kɔst fɔ wan brech de dwarf ɛni fɔnd kɔntribyushɔn. Plɛtfɔm dɛn lɛk Mewayz — wan 207-mɔdyul biznɛs OS na $19/mɔnt — dɛnsɛf bil pan opin sɔs fawndeshɔn dɛn. Fɔ invɛst insay di ikɔsistɛn we de pawa yu tul dɛn na jɔs gud risk mɛnejɛmɛnt ɛn ɛtikul biznɛs prɔsis.

Udat kwalifay fɔ gɛt fɔnd tru wan Open Source Endowment program?

Eligibiliti tipikli de tɔch di mentenɛns dɛm fɔ bɔku pipul dɛm we dɛn dɔn adopt, pɔblik laysens prɔjek dɛm we de sho impak we dɛn kin mɛzhɔ — lɛk dawlod volyum, dipɛndent ripɔsitɔri, ɔ krichɔl infrastukchɔ yus. Solo mentenɛns ɛn smɔl tim dɛn we nɔ gɛt bɛtɛ kɔmɛshɔnal bak na dɛn fɔ put dɛn fɔs, bikɔs big big kɔpɔt-spɔnsɔ projɛkt dɛn dɔn ɔlrɛdi gɛt risɔs. Di gol na fɔ rich di ɔvlɔk divɛlɔpa patch vulnerabilities na midnayt wit ziro faynɛns ritɔn.

Aw indipɛndɛnt divɛlɔpa ɛn smɔl tim dɛn go ebul fɔ gɛt sataynabul inkɔm pas opin sɔs grant?

Biyɔn ɛndawmɛnt, divɛlɔpa dɛn kin divays inkɔm tru kɔnsaltin, manejd ɔstɔ, ɛn ɔl-in-wan pletfɔm dɛn we de ridyus ɔpreshɔnal ɔvahɛd. Mewayz (app.mewayz.com) de gi wan 207-modul biznɛs OS fɔ $19/mɔnt, we de mek divɛlɔpa dɛn ebul fɔ rul klaynt pɔtal, CRM, ɛn invoys we dɛn nɔ de juggling dɔzɛn pe tul dɛn — fri mɔ tɛm ɛn badjɛt fɔ invɛst bak insay di opin sɔs wok we impɔtant.