Notices by Don McCurdy (donmccurdy@fosstodon.org)

If your company relies on open source software and wants to support maintainers, please don't do it this way.

Better models include:

- Tidelift
- Open Source Pledge
- Sovereign Tech Fund Fellowship for Maintainers

I've been expecting something like this since the XZ hack, but still ... frustrated/annoyed/sad to see Microsoft and 13 (!) partners jointly announcing that their answer is to “educate” open source maintainers.

It's nice that they're compensating maintainers for the time spent on that training, but ... compliance with corporate security policies is still a whole lot of ongoing, unpaid work after that? Sigh.

https://github.blog/news-insights/company-news/announcing-github-secure-open-source-fund/