Hacker News
The City of Munich Is Paying libexpat's Maintainer to Work on It Full-Time for Six Months — With 5 Known Unfixed CVEs Outstanding
Starting August 1, Sebastian Pipping is employed by digitial@M under the City of Munich's Open Source Sabbatical program for up to six months of dedicated libexpat work, prioritizing five currently unfixed vulnerabilities, XML 1.0r5 support, and general robustness. libexpat is a dependency almost everyone ships transitively, so a municipal government directly funding its maintenance is a notable precedent for infrastructure that nobody owns. Pipping's post adds a pointed line for the AI era: 'Unvalidated AI slop submissions will still not be appreciated.'
↳ Follow the thread