CodeSupply Announces R and D Grants for Open-Source Software Security

Deadline: 03-Nov-2026

The CodeSupply project offers small to medium-sized research and development grants to support free and open source projects that strengthen software supply chain security, software metadata, and the reliability of the open internet. The initiative is focused on addressing critical challenges in cybersecurity, software supply chain management, and open source license compliance. Through funding for practical research and development, CodeSupply aims to improve access to comprehensive software metadata and support mechanisms that enable democratic access to essential datasets. The open call has reserved €400,000 to fund auxiliary free and open source projects that align with CodeSupply’s objectives.

About the CodeSupply Project

CodeSupply is an initiative of the NLnet Foundation that focuses on improving the security, transparency, and reliability of the software ecosystem. The project addresses important data-related challenges affecting: - Cybersecurity. - Software supply chain security. - Software supply chain management. - Open source license compliance. - Software metadata. - Access to essential datasets. - Reliability of the open internet stack. By supporting free and open source development, CodeSupply seeks to encourage practical solutions that can strengthen the wider digital infrastructure. Purpose of the CodeSupply Funding Call The open call is designed to support auxiliary free and open source projects that contribute directly to CodeSupply’s objectives. The programme aims to foster practical contributions that improve the reliability and trustworthiness of the open internet stack. Funded projects may involve the development of new technologies or the improvement of existing technologies, provided they demonstrate real-world relevance and impact in software supply chain security or related areas. Funding Available The CodeSupply open call has reserved a total of €400,000 for eligible auxiliary free and open source projects. Individual project proposals can request grants ranging from:

- Minimum grant: €5,000

- Maximum grant: €50,000

The funding range is intended to support small to medium-sized research and development projects. Both new and existing technologies can be supported when they demonstrate real-world impact in software supply chain security and related areas. What Types of Projects Can Be Supported? CodeSupply supports a broad range of technical, research, development, security, and community-oriented activities.

Eligible activities include:

- Scientific research. - Design and development of free and open source software. - Design and development of free and open source hardware. - Validation of technical solutions. - Software engineering. - Formal security proofs. - Security audits. - Documentation. - Standardisation. - Usability improvements. - Participation in technical events. - Project management. - Essential infrastructure costs. All proposed costs should be cost effective and directly relevant to CodeSupply’s objectives. Software Supply Chain Security Software supply chains have become increasingly important to the security and reliability of modern digital infrastructure. CodeSupply focuses on projects that can contribute to better security and transparency throughout the software supply chain. Potentially relevant work may include research, software development, security validation, auditing, metadata-related solutions, and other technical approaches that strengthen trust in software and its underlying supply chain. Software Metadata and Essential Data A central component of CodeSupply’s approach is supporting the publication of comprehensive software metadata. Improved metadata can contribute to better understanding and management of software components, dependencies, licensing information, and security-related information. The initiative also seeks to establish mechanisms that enable democratic access to essential datasets, helping make important information more accessible for the wider open source and internet ecosystem. Open Source License Compliance CodeSupply also addresses challenges associated with open source license compliance. Projects that contribute to better understanding, management, documentation, or technical handling of open source licensing issues may be relevant when they align with the wider goals of the programme. Free and Open Source Development The programme places a strong emphasis on free and open source efforts. Supported work can involve both software and hardware development, as well as research, validation, security, documentation, standardisation, and usability. This approach encourages solutions that can contribute to a more open, transparent, secure, and reliable digital ecosystem. Who Can Benefit From CodeSupply Grants? The funding call is intended for projects whose activities directly support the objectives of CodeSupply. Potential applicants should ensure that their proposed project: - Contributes to free and open source efforts. - Addresses software supply chain security or closely related challenges. - Supports software metadata, cybersecurity, license compliance, or open internet reliability where relevant. - Demonstrates practical or real-world impact. - Has clearly defined and cost-effective activities. - Directly aligns with CodeSupply’s objectives. Both new and existing technologies may be considered when they demonstrate meaningful impact. How to Prepare a Strong Project Proposal Applicants should clearly explain how their project contributes to the goals of CodeSupply.

Important preparation steps include:

- Define the problem: Clearly describe the software supply chain, cybersecurity, metadata, licensing, or reliability challenge being addressed.

- Explain the solution: Describe the proposed technology, research, software, hardware, or other intervention.

- Demonstrate open source value: Explain how the project advances free and open source efforts.

- Show real-world impact: Provide a cle