Prosperous SoftwareMovement
The commons, right now
0
vulnerabilities (CVEs) published this year, est. live
1 new every 2m 33s
4× the pace of a year ago.
NVD data via RuntimeWire ↗

Making open source
prosperous for all.

Open source is the foundation of the modern economy. For it to keep compounding, it has to work for both sides: the people who use it, and the people who make it.

98%
of commercial codebases contain open source
Black Duck OSSRA ↗
1K+
open source components in the average application
Black Duck OSSRA ↗
+124%
more vulnerabilities (CVEs) published this year
NVD data via RuntimeWire ↗
58%
of maintainers have quit or considered quitting
Tidelift maintainer survey ↗
§ 01 · Our Approach

Two sides of the commons. One movement.

For consumers
Safe to use
Fixes that keep pace with AI-driven attacks.
For producers
Sustainable to build
Incentives that let creators grow the commons.
§ 02 · For Consumers · Safe To Use

The cybersecurity threat is expanding, fast.

Finding zero-days used to take elite, well-funded teams. Now frontier models find and exploit them autonomously, for anyone. Maintainers can’t absorb the flood, fixes don’t reach users fast enough, and secret embargoes no longer hold.

Our answer · Project POSSUM
A public good that secures open source software, at AI speed and scale.
Maintain
Agentic patching
Patch vulnerable packages with AI agents.
Govern
Secure registry
Distribute fixes through a secure registry.
Respond
Rapid distribution
Find and notify the vulnerable, then ship fixes fast.
The signal · CVEs over time2000s → 2026
CVE Tracker chart: published vulnerabilities stay low for two decades, then climb steeply after 2023 to roughly 15,000.
(Source)
§ 03 · For Producers · Sustainable To Build

Open source has a funding problem. We have a plan to fix it.

Donations reach the few projects you can name, not the hundreds of packages beneath them. We want to route a fraction of commercial revenue back to the open source it was built on, so creators are rewarded as their work grows. The right incentives turn open source into a growing ecosystem of productive creativity.

  • 01Use it freely. No obligation below $1M revenue.
  • 02Share when you succeed. The upside flows back to the creators who made success possible.
  • 03Fund the whole graph. Every dependency gets its share; every fork inherits the clause.
  • 04Set the standard. Define what prosperous software means.
The Simple X/Y RuleLive calculator
if revenue > $2.0M then
  share 2.0% to dependencies.
Revenue threshold (X)$2.0M
Share to dependencies (Y)2.0%
Due to the commons / yr
$40k
PPL v1.0
§ 04 · Advisors

Guided by people who built open source.

Advisors
Open Source Initiative logo
Bruce Perens
Founder, Open Source Initiative
Apache logo
Brian Behlendorf
Founder, Apache
Foresight Institute logo
Christine Peterson
Foresight Institute
Coined “open source”
Anaconda logo
Peter Wang
Founder, Anaconda
npm logo
Isaac Schlueter
Founder, npm
npm logo
Laurie Voss
Founder, npm
RubyGems logo
Andre Arko
Lead, RubyGems + Bundler
Protocol Labs logo
Juan Benet
Founder, Protocol Labs
…and many others across the open source community.
§ 05 · Three Phases Of The Commons

Free. Open. Prosperous.

1980s
Phase I

Free Software

GNU · GPL

Improve software freedoms.

1990s
Phase II

Open Source

OSI · Apache · MIT

Improve collaboration.

2026
Phase III

Prosperous Software

POSSUM · PPL v1.0 · PGF

Safe to use. Sustainable to build.

§ 06 · Join The Movement

Prosperous, for all.

If you use open source
Help secure the packages you depend on.
If you make open source
Learn what makes software prosperous, and build to that standard.
Everyone
Add your name to the movement.