home.social

#tidelift — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #tidelift, aggregated by home.social.

  1. I got the shirt from #tidelift for raising the security of several software packages for #Python and #icalendar. This, #rfc5545 is used in so many places to exchange calendar events freely.

    You can directly support my work, too: open-web-calendar.quelltext.eu

    #OpenWebCalendar #RecurringIcalEvents
    #XWRTimezone

  2. @strypey

    Interesting.

    I didn't see anything in #Snowdrift suggesting any strategic guidance as to which projects to fund.

    #TideLift looked more promising with analysis of projects based on users and security practices to reward maintainers.

    Their announcement that they'd been bought by some security company left me uneasy though. Can #enshittification be far behind? Iy seems like something that would be more effective long-term as a co-operative, foundation or nonprofit.

    #FOSS #Funding

  3. @strypey

    Interesting.

    I didn't see anything in #Snowdrift suggesting any strategic guidance as to which projects to fund.

    #TideLift looked more promising with analysis of projects based on users and security practices to reward maintainers.

    Their announcement that they'd been bought by some security company left me uneasy though. Can #enshittification be far behind? Iy seems like something that would be more effective long-term as a co-operative, foundation or nonprofit.

    #FOSS #Funding

  4. @strypey

    Interesting.

    I didn't see anything in #Snowdrift suggesting any strategic guidance as to which projects to fund.

    #TideLift looked more promising with analysis of projects based on users and security practices to reward maintainers.

    Their announcement that they'd been bought by some security company left me uneasy though. Can #enshittification be far behind? Iy seems like something that would be more effective long-term as a co-operative, foundation or nonprofit.

    #FOSS #Funding

  5. @strypey

    Interesting.

    I didn't see anything in #Snowdrift suggesting any strategic guidance as to which projects to fund.

    #TideLift looked more promising with analysis of projects based on users and security practices to reward maintainers.

    Their announcement that they'd been bought by some security company left me uneasy though. Can #enshittification be far behind? Iy seems like something that would be more effective long-term as a co-operative, foundation or nonprofit.

    #FOSS #Funding

  6. @strypey

    Interesting.

    I didn't see anything in #Snowdrift suggesting any strategic guidance as to which projects to fund.

    #TideLift looked more promising with analysis of projects based on users and security practices to reward maintainers.

    Their announcement that they'd been bought by some security company left me uneasy though. Can #enshittification be far behind? Iy seems like something that would be more effective long-term as a co-operative, foundation or nonprofit.

    #FOSS #Funding

  7. I just added #RecurringIcalEvents to #Tidelift! The last missing bit was the #security policy. Tidelift is supporting me, should anyone find a vulnerability.

    tidelift.com/subscription/pkg/

    If you use it, you can now fund its development using a Tidelift subscription.

    More money flowing into #free #software helps everyone! So: Get out of the vendor lock-in and support me and other open-source maintainers directly ❤️

    #foss #opensource #icalendar #events #python #library

  8. I completed all the tests to #Tidelift the #opensource #python #package x-wr-timezone.

    Tidelift helps your company to secure the supply chain for the free software dependencies of your solutions. It is worth checking out if you care about #foss #sustainability.

    pypi.org/project/x-wr-timezone

    #OpenWebCalendar #xwrtimezone #icalendar #google #funding #security

  9. #Tidelift doesn't generate any money for my widely and commercially used #Firebase SDK, but the Swag is cool!

  10. @emeric @opensourcepledge “the ones that are the most critical and do a fair share”

    That’s not a trivial thing to do – even the what’s “fair” and what’s “critical” can be at odds with one another

    Some companies like #Tidelift applied a model like that, some existing government funds like @sovtechfund have theirs

    @sovtechfund does as far as I know not distribute any money out of fairness but instead based on the value and necessity of that money in maintaining important projects

  11. Dear #Tidelift, when I filed out your survey, I agreed to receive results. I did not give conscious consent for you to afterwards start spamming me with your marketing mails.

    Yeah, I guess you're just another leech making money on #FreeSoftware developers after all.

  12. Nikt nie próbował odgadnąć, a cytat z badania #Tidelift, który miałem na myśli to:

    """
    Kończy się na tym, że zajmujesz się wieloma rzeczami tylko dlatego, że trzeba było to zrobić, a nikt inny tego nie robił. Czujesz się na nie odpowiedzialny, praca się kumuluje, i koniec końców, nie masz nawet czasu szukać kogoś do pomocy.
    """
    (explore.tidelift.com/2024-surv, tłum. własne, autoryzowane)

  13. While nobody even tried guessing, the quote from #Tidelift survey I was referring to was:

    """
    You end up doing a lot of stuff simply because it needed to be done, and nobody else was doing it. You feel you're responsible for it, the work just keeps piling up, and in the end, you're so busy you don't even have time to try to find co-maintainers.
    """
    (explore.tidelift.com/2024-surv)

  14. The results of #Tidelift #OpenSource maintainer survey are out.

    Interesting enough, they've included a quote from my survey. Can you guess which one?

    explore.tidelift.com/2024-surv

    #FreeSoftware #Gentoo

  15. Wyszły wyniki ankiety dla opiekunów otwartego oprogramowania #Tidelift.

    Co ciekawe, jest tam cytat z mojej ankiety. Zgadniecie który?

    explore.tidelift.com/2024-surv

    #WolneOprogramowanie #Gentoo

  16. @Di4na @smxi Good points, and true for most companies.

    But then you also have companies who desperately want to pay someone but don't know who and how. Maybe not enough of them.

    #tidelift obviously is trying to cater to those companies, and it's not unsuccessful, but also not the smashing success that I'd want it to be.

    And what I'm talking not is not exactly Tidelift, which takes more of a facilitator approach rather than a vendor approach.

    Maybe not everything can be covered by Tidelift-but-vendor, but I'd like to think there is a missed opportunity with some core projects for which this would work better than Tidelift or foundations financing grants.

  17. @ehashman @jalcine This sounds like what #Tidelift or #OpenCollective are trying to do, but there are so many projects, and so few companies paying into these companies, that it’s not sustainable. They can’t support the infrastructure enough to pay living wages.

  18. #Tidelift lowers the amount paid out to #PHP package maintainers because demand with enterprise app developers is low.

    Received the following in an email:

    “Unfortunately, the reality is that we haven’t had as much traction with enterprise app developers using PHP as we have with other ecosystems; our customers tend to build their applications with mostly Java, JavaScript, and Python with smaller amounts of C# and Go. (1/3)

  19. Got some excellent swag recently from Tidelift for becoming a Tidelift Lifter last year 🙌 Love some high-quality swag, and 100% agree we should be supporting #OpenSource maintainers!

  20. Tidelift: Why is everyone talking about the software supply chain? And a chat with open source maintainer Jordan Harband [37-minute video]
    youtube.com/watch?v=ouKd1c6_NC
    #Tidelift #WebDev

  21. Tidelift's "Uplift" open source conference starts in 5 minutes. Info on how to watch here upstream.live #oss #sbom #tidelift #upstream23

  22. #Upstream is on June 7, 2023

    "A 100% virtual, completely free event bringing together like-minded application developers, open source project maintainers, and the extended network of people who care most about their work."

    "How do we fix the accidental supply chain that open source has become in a way that benefits both the open source creators and the organizations that rely on their work?"

    upstream.live/

    Hosted by the TideLift folks.

    #OpenSource #events #OnlineEvents #TideLift

  23. I'm the guest of 's webinar on , , and supply chain security happening later today, hope to see you there: tidelift.com/how-the-maintaine

  24. #introduction
    I live in East Somerville and I mostly bike and walk to get around. I'm on the planning committee of Somerville Alliance for Safe Streets.
    My dream is a world where people have reasonable car-free options to get around, and a #bettergreaterboston
    I mostly tweet about infrastructure, so that'll probably carry over here. I log 311 tickets so that we can have data.
    Professionally, I am a product manager at a startup, currently #tidelift #paythemaintainers

  25. has published a three part series about : the most downloaded package with over 3billion/year downloads. 🤯

    The series details how Quentin and I think about security, processes, tooling, and maintenance of critical and infrastructure. Hope you give them a read and learn something new!

    blog.tidelift.com/urllib3-part
    blog.tidelift.com/urllib3-part
    blog.tidelift.com/urllib3-part

  26. There are a few projects, like Tidelift and Snowdrift.coop, attempting something similar to what Colin describes, and he references some of them in footnotes. But he seems to think the funding pools need to be tied into the forges hosting the code. Something for the ForgeFed folks to consider.

    #ForgeFed #Tidelift #Snowdrift