Open Infrastructure Is Not Free. Part II is here.
10 trillion open source package downloads in 2026. More than 1 billion per hour. Still running on donations and volunteers.
AI is accelerating consumption and attacks. Registry leaders have formed the Sustaining Package Registries WG to change that.
Read Part II: https://openssf.org/blog/2026/05/06/open-infrastructure-is-not-free-part-ii-the-hidden-cost-of-running-package-registries/
#PreserveOpenSource #FreeSoftwareIsntFree