The community has relaunched as OffOn with a new website at offon.dev, a coalition of European open source companies is calling for a binding open source first policy in the EU Cloud and AI Development Act, and maintainer funding is front and center this week with pgBackRest nearly losing its maintainer and both Anthropic and OpenAI launching programs for open source contributors. Here is this week’s roundup.
Open Source News This Week
OffOn is live
We have relaunched as community.offon.dev, and have a new website at offon.dev serving as a discovery and information hub. The site includes a clear mission and vision and a contributor guide. Challenge documentation has moved from GitHub to offon.dev challenges with improved layouts and direct Codespace URLs. We would love your feedback on how we can improve or what you want to see. Share it here.
OpenSSF gains five new members and publishes EU Cyber Resilience Act guidance for maintainers
OpenSSF announced five new members at Community Day North America in Minneapolis: ActiveState, Aikido, Minimus, and TuxCare as General Members, and the FreeBSD Foundation as an Associate Member. The foundation also published guidance to help maintainers and open source stewards navigate the EU Cyber Resilience Act, released a Python Secure Coding Guide v1.0, and launched its first Ambassador Program cohort with 13 community leaders focused on spreading security best practices.
Anthropic and OpenAI are competing to sign up open source maintainers
Both companies launched programs offering free access to their AI coding tools targeted at open source maintainers, following each other within weeks. The New Stack reports on the dynamic directly: maintainers sit deep in the software supply chain, and both companies are positioning their tools where developer influence is highest. The piece looks at what each program offers and what it means for maintainers evaluating their options.
Percona steps in to fund pgBackRest after its maintainer stepped down
When pgBackRest’s primary maintainer stepped away due to a lack of sustainable funding, Percona coordinated with other companies to sponsor the project and keep it active. The sponsorship brings creator and lead maintainer David Steele back to active work, covering bug fixes, feature work, and community reviews, alongside efforts to onboard a new long-term maintainer. pgBackRest is used by thousands of organizations for PostgreSQL backup and recovery in production. On the same week, Percona celebrated its 20th birthday and launched the OurSQL Foundation, an independent community-led organization to support MySQL and the broader MySQL ecosystem outside of Oracle.
European open source industry calls for open source first in EU Cloud and AI Act
A coalition of European open source companies has published an open letter to the European Commission calling for a binding requirement in the upcoming EU Cloud and AI Development Act to assess sovereign, open source alternatives before selecting proprietary options. The letter frames the act as a market signal for the European open source industry and makes the case that reducing technical dependency is a prerequisite for digital resilience.
The right to share and the right to repair
Bert Boerland, SUSE Senior Sales Executive and long-time Dutch open source community figure, draws a parallel between the right to repair movement for physical goods and the right to share code. The piece connects hardware repairability, software freedom, and digital sovereignty as parts of the same argument: ownership should include the ability to understand, modify, and extend what you have.
Open Source Tools Worth Checking Out
Kyverno
Kyverno is a CNCF graduated Kubernetes-native policy engine, co-founded by Jim Bugwadia and primarily maintained by Nirmata alongside a broad contributor community. It recently crossed 3 billion downloads and graduated from CNCF at KubeCon Amsterdam in March. Policies are written in standard YAML and CEL, with no new language to learn. The engine handles validation, mutation, and generation of Kubernetes resources, and integrates with CI/CD pipelines for pre-deployment policy checks. This week’s community challenge is built on Kyverno. Jim Bugwadia: Kyverno’s journey to CNCF graduation and 3 billion downloads.
pgBackRest
pgBackRest is one of the most widely used backup and recovery tools in the PostgreSQL ecosystem, relied on by thousands of organizations in production. It supports full, differential, and incremental backups, parallel processing, backup integrity checking, and point-in-time recovery. It is directly in the news this week: its primary maintainer stepped away due to a lack of sustainable funding, and Percona coordinated a group of companies to sponsor continued development. If you run PostgreSQL in production and have not evaluated your backup tooling recently, this is a practical tool worth knowing. pgBackRest documentation and getting started guide.
DDEV
DDEV is an open source local development environment tool used by over 19,000 developers weekly, primarily in the Drupal, WordPress, and PHP ecosystems. It spins up containerized dev environments across macOS, Linux, and Windows without requiring Docker knowledge. You define your project type and version in a .ddev/config.yaml file, run ddev start, and get a working local environment with database, web server, and SSL in under a minute. It handles multiple projects simultaneously and integrates with popular IDEs. DDEV getting started guide.
This Week in the Community
@theharithsa published a detailed breakdown of the open source CLI coding agent landscape: Open-Source CLIs That Actually Replace Claude Code: OpenCode, OpenRouter, OpenSpec and the Rest. The post covers why Claude Code lock-in became a real problem in practice, and how the open source field has responded. A practical read if you are evaluating your tooling choices.
Challenge Update
@KatharinaSick created Lex Imperfecta,a Roman Empire-themed adventure built around Kyverno to celebrate its CNCF graduation earlier this year.
The beginner level walks through Kyverno ValidatingPolicy and MutatingPolicy resources, CEL validation expressions, and the difference between Audit, Deny, and Warn validation actions.
Complete all levels and post your solution before June 23, 2026 at 23:59 CET. Top 3 earn a Credly badge and first place gets a 50% Linux Foundation certification voucher.
Start the challenge on offon.dev.
Question of the Week: Open Source Maintainers Worth Supporting
@Sinduri shared some maintainers she supports and admires. Read her response here.
Know an open source contributor looking for funding? Is there a resource you check to find maintainers who need support? Should we put together a page to help connect contributors with sponsors?