# OSS Digital Safety Tool Teams Funding Opp

**URL:** <https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239>\
**Category:** 📌 Opportunity Board\
**Created:** [April 19, 2023, 3:51pm UTC](https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239 "2023-04-19T15:51:08Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![AmiraG](https://avatars.discourse-cdn.com/v4/letter/a/5f9b8f/32.png) [@AmiraG](https://discourse.sustainoss.org/u/AmiraG)\
**Post date:** [April 19, 2023, 3:51pm UTC](https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239/1 "2023-04-19T15:51:08Z")

</div>

Internews is looking for open-source digital safety and security software teams interested to participate in a fully funded program aimed at supporting teams’ strategic planning and sustainability. The project provides support teams in a variety of ways:

- Individualised sustainability action planning
- Mentoring by sustainability experts
- Fellowship grants to support underdeveloped work areas
- Embedded consultants to support build-out of underdeveloped work areas
- Support implementing ethical analytics to measure end-user engagement

For more information please take a look at our advert: [Call for Expressions of Interest: Open-Source Software Sustainability Project (SUSTAIN) - Information Saves Lives | Internews](https://internews.org/call-for-expressions-of-interest-strategic-planning-for-open-source-software-sustainability-project-sustain/))

---

<div class="post-metadata">

**Author:** ![abitrolly](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/abitrolly/32/845_2.png) [@abitrolly](https://discourse.sustainoss.org/u/abitrolly)\
**Post date:** [April 20, 2023, 6:01pm UTC](https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239/2 "2023-04-20T18:01:54Z")

</div>

Do I understand it right that the opportunity is not to support Open Source developers and maintainers? It reads like it is addressed to support people who are exploring Open Source for the aforementioned security goals.

---

<div class="post-metadata">

**Author:** ![RichardLitt](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/richardlitt/32/8_2.png) [@RichardLitt](https://discourse.sustainoss.org/u/RichardLitt)\
**Post date:** [April 20, 2023, 7:08pm UTC](https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239/3 "2023-04-20T19:08:14Z")

</div>

Looks to me like it is for OSS teams who already have open source projects and are working in the security space, who want their projects to be more sustainable.

---

<div class="post-metadata">

**Author:** ![abitrolly](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/abitrolly/32/845_2.png) [@abitrolly](https://discourse.sustainoss.org/u/abitrolly)\
**Post date:** [April 21, 2023, 8:12am UTC](https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239/4 "2023-04-21T08:12:02Z")

</div>

Thanks for the clarification. Forwarded to BleachBit [Internews budget for the project · bleachbit/bleachbit · Discussion #1479 · GitHub](https://github.com/bleachbit/bleachbit/discussions/1479) It is more privacy focused, but maybe it qualifies.

---

<div class="post-metadata">

**Author:** ![AmiraG](https://avatars.discourse-cdn.com/v4/letter/a/5f9b8f/32.png) [@AmiraG](https://discourse.sustainoss.org/u/AmiraG)\
**Post date:** [April 24, 2023, 11:55am UTC](https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239/5 "2023-04-24T11:55:09Z")

</div>

This is specifically directed at OSS developers and maintainers. The aim is to support the financial sustainability and diversity of the OSS space- one of the components of this is to diversify the space by opening up more to end-users.

---

<div class="post-metadata">

**Author:** ![abitrolly](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/abitrolly/32/845_2.png) [@abitrolly](https://discourse.sustainoss.org/u/abitrolly)\
**Post date:** [April 26, 2023, 4:41am UTC](https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239/6 "2023-04-26T04:41:40Z")

</div>

Submitted application to find funds for doing long standing security review for Python `zipfile` module. Previous attempts to apply for funding from [https://sos.dev](https://sos.dev) got no response.

> <https://github.com/pypi/warehouse/issues/10504#issuecomment-1220289499>
>
> It is possible to upload zip bombs as wheels to PyPI, because Python\`zipfile\` do…esn't contain any tool to check for them (https://www.cvedetails.com/cve/CVE-2019-9674/)
> 
> Blocks #9972 which fixes #8254.

There definitely needs some transparency in how applications are treated.

---

<div class="post-metadata">

**Author:** ![JoeyS](https://avatars.discourse-cdn.com/v4/letter/j/ee7513/32.png) [@JoeyS](https://discourse.sustainoss.org/u/JoeyS)\
**Post date:** [May 5, 2023, 3:39pm UTC](https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239/7 "2023-05-05T15:39:57Z")

</div>

Internews has outlined specific criteria for selecting teams to be part of the SUSTAIN initiative. These criteria include:

 ![Criteria](https://canada1.discourse-cdn.com/flex032/uploads/sustainoss/original/2X/0/0b2d3f28b075bb2cb8f793f64fc399776a45b7a7.png)Bonus points for demonstrating willingness to develop a sustainability plan.

---

<div class="post-metadata">

**Author:** ![JoeyS](https://avatars.discourse-cdn.com/v4/letter/j/ee7513/32.png) [@JoeyS](https://discourse.sustainoss.org/u/JoeyS)\
**Post date:** [May 7, 2023, 2:55pm UTC](https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239/8 "2023-05-07T14:55:08Z")

</div>

Thank you for your interest in our program. We appreciate your feedback and would like to let you know that the updated selection criteria can be found on the forum. If you have any further questions or concerns, please don’t hesitate to let us know.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex032/uploads/sustainoss/original/1X/d7383c3b14cc24bd2aa714ed0d1b527bb4cf3671.png) [@system](https://discourse.sustainoss.org/u/system)\
**Post date:** [May 21, 2023, 2:56pm UTC](https://discourse.sustainoss.org/t/oss-digital-safety-tool-teams-funding-opp/1239/9 "2023-05-21T14:56:06Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.