Call for Proposals: Strengthening Software Supply Chain Security

The NLnet Foundation invites project proposals for its CodeSupply grant, aimed at enhancing software supply chain security through packaging metadata. This opportunity is part of the Open Internet Stack initiative and seeks contributions that align with CodeSupply’s objectives of improving cybersecurity, regulatory compliance, and open source software management. Proposals are due by 3 January 2027, 12:00 CET. CodeSupply is designed to address critical challenges in software supply chain management by aggregating and distributing comprehensive software metadata. This data includes origin, licensing information, security vulnerabilities, and quality metrics, enabling stakeholders to enhance digital sovereignty and independence. The initiative supports developing tools and frameworks that democratize access to data and bolster the security of the open internet stack. Applicants can receive grants ranging from €5,000 to €50,000 for projects that contribute to the CodeSupply objectives. The funding supports research and development efforts that produce practical, real-world impacts on software supply chain security. All funded projects must release their results under a recognized free or open source license. Eligible applicants include independent researchers, developers, and organizations engaged in free and open source technology projects. There are no specific geographic restrictions mentioned, allowing for wide participation.

Projects should focus on:

As software supply chain attacks increase, CodeSupply provides vital support for creating secure and trustworthy digital infrastructures. This grant enables the development of tools and frameworks critical for achieving strategic autonomy and fostering a resilient digital ecosystem. For detailed application procedures, visit the NLnet CodeSupply page. Interested applicants should carefully review the official CodeSupply guidelines and prepare proposals that align with the program’s goals. Ensure all submissions are made by the specified deadline to be considered for funding.