Re: Bug Resilience Program of German Sovereign Tech Fund

2024-06-06 Thread Zack Weinberg
On Thu, Jun 6, 2024, at 10:37 AM, Dan Kegel wrote: > That's a really good idea. Automake and Autotools in general underpin > a fair amount of key open source software, but is taken for granted. > > Ideas for making the case for funding: identify... > - how many commonly used Debian/Ubuntu/Alpine p

Re: Bug Resilience Program of German Sovereign Tech Fund

2024-06-06 Thread Paul Eggert
On 2024-06-06 08:10, Zack Weinberg wrote: On Thu, Jun 6, 2024, at 10:37 AM, Dan Kegel wrote: That's a really good idea. Automake and Autotools in general underpin a fair amount of key open source software, but is taken for granted. Ideas for making the case for funding: As near as I can make

Re: Bug Resilience Program of German Sovereign Tech Fund

2024-06-06 Thread Christoph Grüninger
Hi Zack, you mean we should apply for a combined autoconf and automake proposal? Sure, makes sense to me. Bye Christoph Am 06.06.24 um 17:10 schrieb Zack Weinberg: On the autoconf side of the fence, I do not have spare cycles to write a proposal all by myself, but I would be interested in wor

Re: Bug Resilience Program of German Sovereign Tech Fund

2024-06-06 Thread Christoph Grüninger
Hi Paul, thanks for taking a look into the application! As near as I can make out, the Sovereign Tech Fund Bug Resilience Program application provides funding only for bug bounties, where the bugs are security vulnerabilit

Re: Bug Resilience Program of German Sovereign Tech Fund

2024-06-06 Thread Paul Eggert
On 2024-06-06 10:48, Christoph Grüninger wrote: Citing from the application you linked, I am referring to "direct contribution": > Direct Contributions will be provided by Neighborhoodie GmbH > and entails direct code and non-code contributions, such > as triaging, sorting and fixing known i

Re: Bug Resilience Program of German Sovereign Tech Fund

2024-06-06 Thread Christoph Grüninger
Hi Paul, the Sovereign Tech Fund also offers funding (called General Investments). The application describes what should be achieved and how much it should cost. But that is another program and the application is more difficult. I think we should apply for the Bug Resilience Program with thei