Germany – Research and development services and related consultancy services – Project "Securing the Open Source Ecosystem"

The subject of the ‘Securing the Open Source Ecosystem’ project is contributions to the three open source components ‘PyCA Cyprography’, “Zizmor” and ‘PyPI/Warehouse’. The services to be provided as part of this contract serve to strengthen the security, reliability and robustness of the Python ecosystem as a whole in a systematic, targeted and sustainable manner in the public interest. Specifically, these services include, in particular, the improvement and expansion of cryptography, systematic certificate verification and an in-depth security and risk analysis as part of several milestones.