Re: Common Good Cyber Fund Grant Program for Debian

--000000000000def8a606576b5c33
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello,

El mi=C3=A9, 22 jul 2026, 22:14, Adrian Bunk <[email protected]> escribi=C3=
=B3:

> > This is the longstanding problem that a non-profit project of our size
> > > and asking for donations should really have a proper budget process a=
nd
> > > annual financial reports on our website.
> >
> > That should be covered by SPI, the non-profit, Debian is associated
> project.
>
> What about money in other TOs?
>

Every TO should have a yearly financial report, I assume they need to keep
legal compliance.

Is "A current operational budget" something Debian has?
>

No, a community usually is not run by budgets.

> When reading your email about "security team burnout", I thought this
> > fund could be an option to mitigate such concern, however, how could
> > make it fit and work for the project? Would it be valuable?
>
> The general problem with such grants is that they are for additional
> features[1] - this is temporary funding of additional work, not
> long-term funding of everyday work.
>

Thanks for your thoughts on this, I agree it is a complex fit.

Regards

--000000000000def8a606576b5c33
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div>Hello,=C2=A0<br><br><div class=3D"gmail_quote gmail_=
quote_container"><div dir=3D"ltr" class=3D"gmail_attr">El mi=C3=A9, 22 jul =
2026, 22:14, Adrian Bunk &lt;<a href=3D"mailto:[email protected]">bunk@debian=
.org</a>&gt; escribi=C3=B3:</div><div dir=3D"ltr" class=3D"gmail_attr"><br>=
</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-l=
eft:1px #ccc solid;padding-left:1ex">
&gt; &gt; This is the longstanding problem that a non-profit project of our=
 size<br>
&gt; &gt; and asking for donations should really have a proper budget proce=
ss and<br>
&gt; &gt; annual financial reports on our website.<br>
&gt; <br>
&gt; That should be covered by SPI, the non-profit, Debian is associated pr=
oject.<br>
<br>
What about money in other TOs?<br></blockquote></div></div><div dir=3D"auto=
"><br></div><div dir=3D"auto">Every TO should have a yearly financial repor=
t, I assume they need to keep legal compliance.</div><div dir=3D"auto"><br>=
</div><div dir=3D"auto"><div class=3D"gmail_quote gmail_quote_container"><b=
lockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px =
#ccc solid;padding-left:1ex">Is &quot;A current operational budget&quot; so=
mething Debian has?<br></blockquote></div></div><div dir=3D"auto"><br></div=
><div dir=3D"auto">No, a community usually is not run by budgets.</div><div=
 dir=3D"auto"><br></div><div dir=3D"auto"><div class=3D"gmail_quote gmail_q=
uote_container"><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8e=
x;border-left:1px #ccc solid;padding-left:1ex">&gt; When reading your email=
 about &quot;security team burnout&quot;, I thought this<br>
&gt; fund could be an option to mitigate such concern, however, how could<b=
r>
&gt; make it fit and work for the project? Would it be valuable?<br>
<br>
The general problem with such grants is that they are for additional <br>
features[1] - this is temporary funding of additional work, not <br>
long-term funding of everyday work.<br></blockquote></div></div><div dir=3D=
"auto"><br></div><div dir=3D"auto">Thanks for your thoughts on this, I agre=
e it is a complex fit.</div><div dir=3D"auto"><br></div><div dir=3D"auto">R=
egards=C2=A0</div></div>

--000000000000def8a606576b5c33--