CodeSupply open call (2026-11Y)

Open data about software packages is critical for the automation and scale necessary to resolve software supply chain management and address security and regulatory and open source compliance challenges. CodeSupply aggregates and curates comprehensive software metadata, including origin and licensing information, security vulnerabilities, and quality metrics from distributed, authoritative data sources across programming ecosystems and software types. This metadata is assembled in reference data sets, federated in a unified data catalog for digital sovereignty and independence, and distributed as open data, freely available to all, using an open source data license.

The CodeSupply project pursues three interconnected objectives that directly address data challenges in cybersecurity, software supply chain management, and regulatory and open source license compliance:

• Publish current, correct, and comprehensive software metadata

• Establish a scalable and sustainable mechanism to provide democratic access to data sets

• Create a foundational framework for future iterations, enhancements, and new data sets

CodeSupply will deliver an ambitious development effort, but this is a vast domain with many more challenges than what any preconceived effort could tackle by itself. This is why we invite your contribution to help us reshape the state of play, and together create an open, trustworthy and reliable internet for all.

This is your opportunity to make a real difference. You tell us how your project can help CodeSupply go harder, better, faster, stronger. In order to enable you to make such contributions, we will award small to medium-size R&D grants towards solutions that bring the next generation of mobile solutions closer. We are seeking project proposals between 5.000 and 50.000 euro's — which should get you on your way. If the project works out well you can subsequently scale up in other programmes funded by NLnet such as Restack. Noteworthy fact: several projects within CodeSupply were themselves bootstrapped on precisely such a grant from NLnet, and now it is your turn.

A more complete overview of the call text, proposal guidelines and an FAQ can be found on the main call page: https://NLnet.nl/codesupply