CodeSupply open call (2027-01Y)
CodeSupply open call (2027-01Y) supports researchers, developers and organisations building open source tools and software package metadata infrastructure to strengthen software supply chain security.
Funder: European Commission
Due Dates: January 3, 2027 (NLnet deadline, noon CET) | February 3, 2027 (EU portal deadline)
Funding Amounts: €5,000–€50,000 per project for 1–12 months (flexible); €300,000 available for this call
Summary: Supports free and open source components that strengthen software supply chain security through software package metadata.
Key Information: Projects must have a clear European dimension and release all funded outcomes under free and open licenses.
Description
CodeSupply supports independent researchers, developers and organisations contributing to an open source, federated and digitally sovereign database of software package metadata. Supported by the European Commission through Horizon Europe, the project brings together software origin, licensing, security vulnerability and quality information from distributed, authoritative sources. NLnet administers the auxiliary grants through cascade funding, with the EU-funded project awarding and paying grants directly.
The call seeks practical R&D contributions, including additional FOSS components, auxiliary tools, user-experience improvements, integrations with FOSS applications and open standards, and improvements to underlying infrastructure. Both new ideas and improvements to existing, future-proof technologies are welcome. The goals are comprehensive, current metadata, sustainable access to datasets and a foundation for future enhancements within the Open Internet Stack.
