You use it every single day. It parses the data on your phone, secures your banking transactions, and quietly keeps the modern internet from collapsing into a pile of unreadable code. But you probably don’t know its name, and you definitely don’t know the person who maintains it.
That person is likely exhausted. They are working nights and weekends, unpaid, while trillion-dollar tech conglomerates build empires on top of their free labor. The internet isn’t held together by Silicon Valley venture capital; it’s held together by exhausted volunteers and duct tape.
Enter libexpat. It’s a tiny, foundational XML parsing library. Recently, its maintainer needed a break—a sabbatical to avoid the burnout that plagues the open source community. Did Google step up with a grant? Did Microsoft open its massive checkbook? Did Apple even return the call?
No. The City of Munich, Germany, stepped up. They funded the maintainer for six months.
At first glance, this feels like a heartwarming story of municipal philanthropy. A local government doing its part for the digital commons. But if you know the history of Munich’s IT infrastructure, you know this isn’t just charity. It’s a calculated strike in a decade-old political war.
Years ago, Munich didn’t just use open source; they went all in. Under Mayor Christian Ude, the city migrated over 14,000 public administration PCs to Linux in a project known as LiMux. It was a massive declaration of digital sovereignty. And it made Microsoft furious.
Steve Ballmer and Bill Gates themselves flew out to Munich to personally pressure the mayor to abandon Linux and return to Microsoft. They threw their weight around, leveraging immense corporate and political pressure. But Ude didn’t blink. He stood his ground against the most powerful tech monopoly on earth.
Funding libexpat today isn’t an isolated act of kindness; it’s the continuation of that exact same battle. Munich is systematically buying back its digital independence. When a city government understands your infrastructure better than the trillion-dollar companies monetizing it, the market hasn’t just failed—it’s surrendered.
If you build software, this reality is already staring you in the face. You’ve felt the dread of checking a critical dependency, only to realize the last commit was three years ago. You know the anxiety of relying on a package maintained by an anonymous developer in an unknown timezone. You know that the “free” in free software often means “free exploitation.”
The tech giants have spent years perfecting the art of the free ride. They take, they integrate, they ship, and they vanish when the bill comes due. They treat open source like an infinite, self-replenishing resource that requires no upkeep. They want the benefits of a public road system without paying the taxes to pave it.
Munich’s intervention proves that market-based solutions for open source sustainability are a myth. Corporate donation jars and hackathons are bandaids on a hemorrhage. We don’t need tech giants throwing pennies into a donation jar; we need them to pay taxes to the public institutions actually keeping the lights on.
This is the paradox of our digital infrastructure. The most reliable patrons of the open web might not be the venture-backed startups in San Francisco, but the bureaucratic city halls in Europe that have already fought—and won—battles against the giants. Munich gets it. They are securing their own foundation. The rest of the tech industry is just crossing its fingers, hoping the duct tape holds a little longer.
FAQ
Q: Isn't it a bad idea for governments to fund individual open source projects?
A: It's actually the most rational approach we've seen yet. Governments rely on this infrastructure for public services. If the market won't maintain critical public goods, public institutions must step in to secure their own operations.
Q: What does this mean for everyday open source maintainers?
A: It means your most reliable long-term funding might not come from a corporate sponsor, but from public sector grants. Municipalities and governments have a vested interest in stable infrastructure that corporations simply don't share.
Q: Is corporate open source funding actually a myth?
A: Largely, yes. Corporate funding is often PR-driven, highly conditional, and ignores the unglamorous foundational libraries that don't make headlines. They fund what benefits their immediate roadmap, leaving the actual bedrock to rot.