Registries like PyPI, Maven Central & crates.io power the ecosystem.

They can’t run on goodwill alone.

OpenSSF endorses the Joint Statement on Sustainable Stewardship.

👉 openssf.org/blog/2025/09...

#PreserveOpenSource

Open Infrastructure Is Not Free Part II

10 trillion open source package downloads in 2026. Still running on donations and volunteers.

AI is accelerating attacks. The Sustaining Package Registries WG is here to help.

openssf.org/blog/2026/05...

#PreserveOpenSource

Open infrastructure isn't free. 🌱
Packagist/Composer signed a joint @openssf.org letter with PyPI, crates, Maven, CPAN, etc on real cost of running package registries.
#php #phpc #composerphp #softwaresupplychain #PreserveOpenSource #FreeSoftwareIsntFree #OpenSource #Sustainability

The future of digital innovation depends on sustainable #opensource infrastructure.

Learn how businesses can help ensure long-term sustainability in #EclipseFdn Executive Director Mike Milinkovich’s latest blog: hubs.la/Q03Kz6D50 #PreserveOpenSource #SoftwareSupplyChain #OpenSourceResponsibility