The pitch sounds almost quaint in an industry obsessed with disruption: invest donations, preserve the principal, and fund struggling software maintainers forever. Not for a few years. Forever.
That's the ambition behind the Open Source Endowment, which launched February 26 with $750,000 in committed capital and a model borrowed from Harvard's playbook rather than Silicon Valley's. Money flows in, gets invested, and only the returns—targeting 7-8% annually—go out as grants. The principal stays untouched, creating what founder Konstantin Vinogradov describes as "permanent, predictable funding" for critical infrastructure that often runs on volunteer labor.
It's a different bet than the one most open source funding efforts have made. And whether it works may depend less on investment returns than on convincing an industry built on free software that permanence is worth paying for.
The Money and the Names Behind It
Founding donors read like an open source hall of fame, which helps. Mitchell Hashimoto of HashiCorp. Evan You, creator of Vue.js and Vite. Shay Banon from Elastic. Daniel Stenberg, who built and has maintained cURL for over two decades. Thomas Dohmke, GitHub's former CEO, contributed, as did Kailash Nadh from Indian fintech powerhouse Zerodha.
By late February, that initial group had expanded to 90 donors holding $716,000—56 of them "members" who contributed at least $1,000 and gained governance rights in the process. The organization incorporated as a U.S. 501(c)(3) public charity on February 14, 2025.
Vinogradov, formerly a general partner at venture firm Runa Capital, chairs the board. Joining him: Chad Whitacre, who leads open source at Sentry, and Maxim Konovalov, co-founder of NGINX. Jonathan Starr, previously with NumFOCUS, runs day-to-day operations as executive director.
It's a group that understands both the technical debt and the actual debt involved in maintaining software that billions depend on. Whether they can persuade others to commit capital is another question entirely.
What Gets Funded (and What Doesn't)
The endowment isn't attempting to solve every funding gap in open source—probably wise, given the scale of the problem. Instead, it targets a specific slice: independent projects without corporate backing, without venture capital, without associated startups. That automatically excludes projects like Kubernetes or ClickHouse, both born inside companies.
What qualifies gets evaluated through a "Value-Risk" framework the organization is developing publicly on GitHub. The model weighs download counts, dependency graphs, OpenSSF security scores, bus factor—tech industry shorthand for how many people would need to get hit by a bus before a project becomes unmaintainable—and existing funding signals. Anyone can nominate projects, including maintainers nominating themselves.
First grants are slated for Q2 2026, pending board approval. They'll be microgrants of roughly $5,000—not exactly life-changing money, though perhaps enough to fund security audits, stability improvements, or at least acknowledge years of unpaid maintenance. The modest amounts reflect current reality: at present scale, the endowment might distribute $35,000 annually. Maybe.
Infinite Giving serves as outsourced chief investment officer, managing the portfolio after the organization initially parked funds in U.S. Treasuries. Professional money management for what amounts to, at this stage, a rounding error by university endowment standards.
The Permanence Premium
Open source funding mechanisms aren't exactly scarce. GitHub Sponsors has distributed over $40 million directly to maintainers. Open Collective offers transparent budgets and fiscal hosting. Tidelift pays developers based on enterprise software bill of materials data and adherence to secure development practices.
The endowment model trades immediacy for permanence—which is either the whole point or a fundamental misunderstanding of maintainer needs, depending on who you ask.
One corporate donor can eliminate a budget line when quarters go sideways. An endowment earning investment returns persists through recessions, tech downturns, and shifting corporate priorities. It's meant as a hedge against the volatility that has plagued open source funding, most dramatically when Open Collective Foundation dissolved in 2024 and forced projects to scramble for new homes.
Government initiatives like Germany's Sovereign Tech Fund write substantially larger checks for critical infrastructure. OpenSSF's Alpha-Omega project, bankrolled by AWS, Google, and Microsoft, focuses specifically on security hardening. The endowment aims to complement these by targeting maintainer sustainability broadly, not just crisis intervention.
Some donors find that independence appealing—funding that doesn't evaporate when a company's strategic priorities shift or a particular executive champion moves on. Others remain unconvinced. Hacker News commenters questioned whether $5,000 grants would meaningfully address maintainer burnout or attract fresh contributors to projects already struggling.
Fair questions, perhaps. Though it's worth noting that criticism of insufficient funding tends to come from an industry that has historically paid maintainers nothing at all.
Universities, Not Startups
Vinogradov's analogy runs deeper than the endowment structure. Open source, he argues, resembles universities more than it does venture-backed startups. Both function as public goods with global reach. Both benefit "alumni" long after they've moved on. Universities addressed this with endowments that can fund operations across centuries.
Maybe open source can do the same. Or maybe the comparison breaks down—universities have buildings, brands, and alumni networks that open source projects largely lack.
The organization has set itself seven years to reach $100 million in assets under management. At that scale, spending 5% annually would generate $5 million for grants—enough, theoretically, to make a meaningful impact. Getting there requires convincing individuals and companies that this model deserves a place alongside GitHub Sponsors, corporate foundations, and direct employment of maintainers.
The broader context, at least, supports the pitch. Log4Shell in 2021. The XZ Utils backdoor in 2024. Heartbleed in 2014. Each incident revealed how much critical infrastructure depends on unpaid volunteers—the endowment cites data suggesting 86% of open source contributors work without compensation. Billion-dollar businesses rest on that unpaid labor.
Now they're being asked to fund it permanently, or at least pretend permanence is achievable in an industry that reinvents itself every few years.
The First Test
Q2 2026 will deliver the first verdict. Maintainers can nominate projects or apply themselves through the organization's website. Donors can contribute via Every.org using ACH, wire transfers, cards, PayPal, cryptocurrency, donor-advised funds, or stock donations.
The organization publishes board minutes, bylaws, and its grantmaking model on GitHub—transparency meant to differentiate it from corporate-controlled alternatives. Members who contribute at least $1,000 annually gain advisory rights, voting privileges on certain matters, and the ability to help appoint community-nominated directors.
Whether the endowment reaches $100 million or plateaus at $5 million, it represents a fundamentally different wager about open source's future. One that treats the funding problem as permanent rather than something fixable with a few well-meaning grant cycles.
The university endowment model took centuries to develop and prove itself. Open source, predictably, is trying to do it faster. First grants in 18 months will show whether ambition matches execution—or whether maintainers will still be cobbling together funding from wherever they can find it, same as always.
