CodeSupply open call (2026-11Y)

Open call a cascata (sostegno finanziario a terzi) del progetto UE Open source, federated, and digitally sovereign database of software package metadata to strengthen software supply chain security. (CodeSupply), finanziato dal programma Horizon Europe (HORIZON). Stato: aperta. Prossima scadenza: 03/11/2026 (single-stage). Testo ufficiale (in inglese): Open data about software packages is critical for the automation and scale necessary to resolve software supply chain management and address security and regulatory and open source compliance challenges. CodeSupply aggregates and curates comprehensive software metadata, including origin and licensing information, security vulnerabilities, and quality metrics from distributed, authoritative data sources across programming ecosystems and software types. This metadata is assembled in reference data sets, federated in a unified data catalog for digital sovereignty and independence, and distributed as open data, freely available to all, using an open source data license. The CodeSupply project pursues three interconnected objectives that directly address data challenges in cybersecurity, software supply chain management, and regulatory and open source license compliance: Publish current, correct, and comprehensive software metadata Establish a scalable and sustainable mechanism to provide democratic access to data sets Create a foundational framework for future iterations, enhancements, and new data sets CodeSupply will deliver an…