CodeSupply open call (2026-11Y) - Open source, federated, and digitally sovereign database of software package metadata to strengthen software supply chain security.
European Commission · Horizon Europe Framework Programme (HORIZON) · cascade funding under HORIZON-CL4-2025-03-HUMAN-16
Publié 3 sept. 2026 · 26 jours restants
En clair
Résumé pas encore disponible en français ; affiché en anglais.
The European Commission funds development of CodeSupply, an open-source federated database of software package metadata to improve software supply chain security and open-source compliance. This cascade-funding call invites consortia of organisations in EU member states and associated countries to contribute to this effort, with a total budget of 400,000 euros and applications due by 3 November 2026.
Un résumé généré du texte du bailleur ; la formulation originale figure ci-dessous.
Résumé
Texte original du bailleur (anglais)
Open data about software packages is critical for the automation and scale necessary to resolve software supply chain management and address security and regulatory and open source compliance challenges. CodeSupply aggregates and curates comprehensive software metadata, including origin and licensing information, security vulnerabilities, and quality metrics from distributed, authoritative data sources across programming ecosystems and software types. This metadata is assembled in reference data sets, federated in a unified data catalog for digital sovereignty and independence, and distributed as open data, freely available to all, using an open source data license.
The CodeSupply project pursues three interconnected objectives that directly address data challenges in cybersecurity, software supply chain management, and regulatory and open source license compliance:
Publish current, correct, and comprehensive software metadata
Establish a scalable and sustainable mechanism to provide democratic access to data sets
Create a foundational framework for future iterations, enhancements, and new data sets
CodeSupply will deliver an ambitious development effort, but this is a vast domain…
Extrait de la page du bailleur. Le texte intégral, les annexes et les formulaires se trouvent dans l'appel original.
Régions éligibles
- États membres de l'UE
Qui peut candidater
- ONG / société civile
- Établissement universitaire ou de recherche
- Entreprise privée
- Organisme public
- Consortium obligatoire