57 Projects Receive NGI Zero Grants to Fix the Internet

Trustworthy hardware and manufacturing

• Automatic component and via placement for Topola — Complete PCB schematic-to-layout flow

  The first step in designing a printed circuit board (PCB) layout is choosing where to place the components. This task is tedious and time-consuming, often requiring just as much effort as the process of routing the traces that comes afterwards. Fortunately, component placement can be automated with software called an autoplacer, just as routing traces can be automated with a program known as an autorouter. The goal of this project is to develop a component autoplacer for the PCB autorouting system Topola, turning it into a complete PCB schematic-to-layout flow. To find the best locations for components, the autoplacer will use a probabilistic optimization algorithm known as simulated annealing.

  ▸ For more details see: https://nlnet.nl/project/Topola-autoplacer

• BrailleRAP — Open source Braille and graphics embosser

  BrailleRAP is an open source Braille embosser. Available in 2 sizes, A4 and A3, BrailleRAP is designed to be easily built in fablab with widely available parts. The project also provide open source software to translate text into Braille in various standards, and publishing application to compose page design with a mix of vector graphics and Braille. BrailleRAP provide an open source ecosystem to produce suitable documents for visually impaired, Braille of course, but also country or city maps, pedagogic illustrations, etcetera. The project aims to provide accurate translation in Braille for mathematics notations, which is a specific standard. Improve accessibility and edition features, and provide wireless connectivity to ease use in public places like libraries, schools or university.

  ▸ For more details see: https://nlnet.nl/project/BrailleRAP-Math

• GLOW-SG13G2 (Gate Library for Open Flow - SG13G2) — Digital standard cell library for IHP SG13G2 process

  GLOW-SG13G2 is an open-source digital standard cell library for IHP SG13G2 process. It will provide a methodology for the design of standard cells, flow for characterization and a library of 150+ designed and characterized cells. Standard cells will be designed for use with open source digital flow tools to build complex SoCs. Methodology and characterization flow will in most part be process-agnostic, and can be used as a foundation for streamlined development of additional standard cells, or for development/porting to other open source CMOS processes.

  ▸ For more details see: https://nlnet.nl/project/GLOW-SG13G2

• KiCad Frontpanel Generator — Create matching front panels for KiCad PCBs automatically

  The most popular free and open source design suite for Printed Circuit Boards (PCBs) likely is KiCad. When designing a PCB with buttons and switches, that's meant to be operated by an end user, the PCB usually is covered by a front panel. The front panel has cut-outs and labels for switches, displays and indicator lights. Designing a suitable front panel often is a time-consuming extra step, because all the cut-outs and labels must be placed manually at precise locations to match the PCB components. KiCad Frontpanel Generator creates matching front panels for KiCad PCBs automatically. The PCB designer defines cut-outs and labels in unused layers of footprints and in the PCB. The Front Panel Generator then uses the shapes from these layers to generate a suitable cover plate.

  ▸ For more details see: https://nlnet.nl/project/Frontpanel-Generator

• Noise Nugget — FOSS digital audio processing

  Noise Nugget is an ultra-compact development board for audio synthesis and processing, providing all the complexity of digital audio in a simple, reusable, open-source, and open-hardware module. With an emphasis on low cost, small form factor, and design for manufacturing. The end goal is to provide a complete solution (hardware and software) for anyone to discover and experiment with digital audio, while opening an easy way to transition to production of audio products in series. The project is entering a new stage, with an upgraded hardware and a new ecosystem of software libraries to fully exploit the processing capabilities.

  ▸ For more details see: https://nlnet.nl/project/NoiseNugget

• NVE — Co-simulation framework for hardware designers

  NVE (Nebula Verification Environment) is an open-source co-simulation framework, that lets hardware designers verify their RTL implementations against a software reference model with cycle-accurate checking and time-travel debugging. The engine is architecture-agnostic and ships with a RISC-V reference model. The grant funds its extraction into a standalone, documented library usable by the broader open-source hardware community.

  ▸ For more details see: https://nlnet.nl/project/NVE

• Open PCIe and M.2 hardware and software platform — Standard form factor open hardware extension cards

  Developing hardware for PC slots like PCIe and M.2 is currently very difficult because most design details are hidden behind NDAs and expensive specifications. This makes it almost impossible for hobbyists and students to build their own peripherals or experiment with new ideas. The 'Open PCIe and M.2 Hardware and Software Platform' project aims to change this by offering an easy entry point for education and makers. By providing open-source hardware templates and libraries that work with familiar tools like Arduino and MicroPython, the project simplifies the complex world of PCIe expansion. Through documented breakout boards and video guides, it turns the PC’s internal slots into a safe, accessible playground for learning, allowing anyone to build custom hardware without needing professional-grade resources.

  ▸ For more details see: https://nlnet.nl/project/PCIe-M.2-extensionboards

• Padne — Open source power delivery network analyser padne

  padne is a KiCad-native tool for power delivery network analysis using the finite element method. It simulates DC voltage drops and current density on printed circuit boards, bringing capabilities to the open-source EDA ecosystem that have traditionally required expensive proprietary software. This project focuses on validating computational accuracy through test PCB fabrication and measurement, improving performance through parallelization, and building documentation to support wider adoption.

  ▸ For more details see: https://nlnet.nl/project/Padne

• PowerCommons — OpenPower A2O Core Revival

  The PowerCommons project treats computing infrastructure as a commons—open, composable, and collectively maintained—built on the OpenPOWER architecture. It emerges from a recognition that computational infrastructure shapes society as fundamentally as roads, utilities, and communications networks. When this infrastructure is opaque and privately controlled, democratic oversight becomes impossible. We are building the alternative: infrastructure that is transparently operated and publicly auditable by design. This philosophy is backed by architectural depth: a composable platform where cores and components can be selected and combined freely for any given use case. The long-term vision is a fully sovereign, open alternative to x86 and ARM across the entire computing spectrum: from embedded and IoT devices, through mobile and laptops, to workstations, servers, and high-performance computing.

  The A2O Core Revival project restores full functionality to IBM's A2O processor core and lays the foundation of that composable platform. It addresses build system incompatibilities with modern toolchains, resolves critical timing and synthesis issues, and establishes a reproducible LiteX SoC integration capable of booting Linux on modern Xilinx FPGA platforms (Zynq and VCU-118). Deliverables include simulation and testbench infrastructure, initial open-toolchain synthesis flows targeting the IHP 130nm open PDK, comprehensive documentation, and a roadmap for ISA modernization toward Power ISA 3.1C compliance.

  ▸ For more details see: https://nlnet.nl/project/PowerCommons

• SpinalWaves & SpinalTrace — Typed waveform viewing and error source tracing for SpinalHDL

  This project will develop two open-source debugging tools — SpinalWaves and SpinalTrace — to simplify the debugging of hardware designs written in SpinalHDL, a high-level hardware generator language (HGL) used to design various computing hardware systems. HGLs like SpinalHDL compile down to industry-standard hardware descriptions such as VHDL and Verilog. Debugging HGL designs is challenging because errors observed in signal values at the compiled low-level hardware are often difficult to trace back to the high-level code that generated them. SpinalWaves will extend waveform visualization by preserving and displaying high-level type information for hardware signals, while SpinalTrace will enable tracing faulty signal transitions back to their source in the original SpinalHDL code. The tools will build on prior work from the Tydi ecosystem, which includes Tywaves and ChiselTrace for the Chisel hardware design language. However, adapting these concepts to SpinalHDL requires new techniques due to differences in the compilation flow, particularly the absence of an intermediate representation such as FIRRTL. The project will therefore develop new mechanisms for extracting program dependency information and inserting instrumentation within the SpinalHDL compilation process. The expected outcome is an integrated, open-source debugging toolkit for SpinalHDL that improves developer productivity, lowers the barrier to hardware design, and strengthens the broader open-source hardware development ecosystem.

  ▸ For more details see: https://nlnet.nl/project/SpinalWaves

• Yanartas — Libre intertial hardware security module

  Yanartas is an open-source hardware security module (HSM). Yanartas is a secure storage for cryptographic secrets that is protected against advanced attackers including nation-state adversaries using an array of active tamper detection sensors. Unlike something like a smartcard or crypto wallet, the sensors of an HSM like Yanartas are always on and the attacks are detected the moment they happen. As part of the project, everything needed to build your own HSM including hardware source files, firmware, and documentation will be published.

  ▸ For more details see: https://nlnet.nl/project/Yanartas

Network infrastructure incl. routing, P2P and VPN

• Bromal — Lightweight messaging server for Matrix protocol

  Bromal is a lightweight opensource messaging server, that uses the Matrix protocol. It is being developed for the efficient deployment of federated messaging systems with modest resource requirements, as a result, it could be deployed even on small servers, including VPS, without sacrificing essential functionality. The project aims to support server-to-server federation, state resolution for different room versions, end-to-end encryption, a full-featured messaging module, built-in VoIP, automatic TLS certificate acquisition via Let's Encrypt using the ACME protocol, as well as the ability to create a cluster for larger installations.

  ▸ For more details see: https://nlnet.nl/project/Bromal

• mgmt config — Real-time system automation tool

  mgmt is a fast and modern automation tool for managing services and servers. It lets users model how that infrastructure should look, behave and react over time. Instead of separating provisioning, configuration management, and orchestration, it unifies these concepts and lets you build elegant distributed systems while also running as a distributed system. It can manage anything from home labs to full production infrastructure and helps organizations reduce operational overhead while repatriating workloads. Within this grant the project will among others work on performance enhancements, add new models, function error locations and lsp/syntax highlighting, improve documentation as well as making it easier to import automation rules from external resources.

  ▸ For more details see: https://nlnet.nl/project/mgmt-config

• YunoHost Packaging + Declarative Settings — Frugal and ergonomic selfhosting

  YunoHost is a turnkey self-hosting solution based on Debian, designed to simplify server administration while being reliable, secure, and lightweight. In the scope of this grant, YunoHost will implement OIDC and introduce a new generation of packaging mechanism. The OIDC support will align YunoHost with modern SSO practices through the OpenID Connect protocol, with improved security aspects compared to the current homemade SSO. It also facilitates integration with third-party services that support OIDC, while maintaining consistency with YunoHost’s current architecture and centralizing identity management. Packaging v3 will define a more declarative and standardized approach to application packaging. It restructures package design by consolidating scripts and formalizing configuration management, with the aim of limiting redundancy and complexity. Common operations such as system configuration, service management, and lifecycle tasks (install, remove, backup / restore, upgrade) will be abstracted and automated. This approach is expected to improve maintainability and consistency across packages, determinism, security aspects, and pave the way to advanced features.

  ▸ For more details see: https://nlnet.nl/project/YunoHost-DeclarativeSettings

Software engineering, protocols, interoperability, cryptography, algorithms, proofs

• Modern High-Level Python OpenPGP library — Python integration of Stateless OpenPGP

  This project will implement a new Python OpenPGP library based on the Rust rPGP implementation. The API design will be guided by the vendor-independent "Stateless OpenPGP (SOP)" standard, to cover the most common operations. The library will support the traditional OpenPGP "v4" formats, modern "v6" formats (from RFC 9580), and the IETF standardized OpenPGP PQC formats.

  ▸ For more details see: https://nlnet.nl/project/OpenPGP-SOP-Python

• Matridge spaces — Gateway for XMPP users to transparently chat in Matrix rooms

  Matridge is a gateway for XMPP users to transparently chat in Matrix rooms. It is an XMPP server-side component that acts as a Matrix client and makes it possible to pilot a Matrix client from any XMPP client. It implements modern instant messaging features such as rich replies, spaces, attachments, emoji reactions and threads. It is self-hosting friendly, community-lead, written in python and based on slidge, an XMPP gateway library.

  ▸ For more details see: https://nlnet.nl/project/Matridge

• Incroxigraph — Extend Oxigraph with continuous live evaluation of SPARQL queries

  Dynamic applications, such as real‑time dashboards, local‑first clients, IoT analytics, and collaborative data platforms, increasingly require SPARQL queries that react instantly to changing RDF data. Today, most engines fully recompute query results, causing unnecessary delays. This project introduces Incroxygraph, which extends Oxigraph (a fast, Rust‑based graph database implementing the SPARQL standard) to support Incremental View Maintenance (IVM) for SPARQL queries. By updating query results incrementally as data changes, Incroxigraph will enable highly responsive SPARQL applications with significantly lower latency and computation overhead. The work re‑implements proven incremental techniques in Rust and delivers them as an open‑source, production‑grade engine with bindings for Python and potentially WebAssembly/JavaScript. A key integration target is NextGraph, a decentralized CRDT‑driven platform where Incroxigraph will allow efficient querying over continuously evolving, collaborative data. The resulting technology will strengthen the open Linked Data ecosystem by making responsive SPARQL evaluation broadly accessible for modern, data‑intensive, and decentralized applications.

  ▸ For more details see: https://nlnet.nl/project/IVM-Oxigraph

• (H)IDE for Guile Hoot — Scheme on WASM

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/Guile-Hoot-IDE

• Arcan-A12 Endpoints — Unifying distributed remote desktops

  A12 is a next generation remote desktop protocol built on the principles of "one desktop, many devices" and "your desktop, reaching out". This means that all your devices, big and small, should be able to join together to form a unified whole and for you to be able to share slices of this with others. It has a complementary extension, 'A12-Directory' which adds a network of servers for load balancing, distributed storage, search/retrieval, application hosting and discovery. With 'A12-Endpoints' we seek to expand the range of applications, media and document formats that can be hosted, as well as the kinds of devices that can participate.

  ▸ For more details see: https://nlnet.nl/project/Arcan-A12-endpoints

• CurveForge — Add optimized post-quantum arithmetic to cryptographic toolkit

  CurveForge focuses on developing efficient and secure implementations of elliptic-curve cryptography (ECC) using automatic optimization techniques. The project aims to deliver high-performance, portable, and maintainable ECC solutions that can be widely adopted. By leveraging automatic optimization, CurveForge avoids the need for curve-specific implementations, making advanced cryptographic techniques more accessible and practical for real-world applications. Future efforts will also target post-quantum primitives. Work within this grant focuses on those post-quantum primitives, towards a demonstrator in form of a rustls crypto provider, improve the performance, as well as improving the test coverage with wycheproof.

  ▸ For more details see: https://nlnet.nl/project/CurveForge

• Diesel CLI — Safe and performant database queries in Rust

  Diesel is a safe and performant query builder and ORM written in Rust. It aims to eliminate security issues like SQL injections by providing a type safe domain specific language to express your SQL query as Rust code. This domain specific language enables checking the query at compile time to turn insecure or otherwise invalid SQL queries into compile time errors. Diesel supports the relational database systems SQLite, MySQL and PostgreSQL out of the box. Support for other database systems can be added by libraries built on top of Diesel.

  The Diesel project provides a command line tool to simplify the development workflow of projects using Diesel as database library. This command line tool currently cannot be extended by others, which puts a large maintenance burden on the main project. As part of this project we want to develop an extension interface for the Diesel command line tool so that other projects can integrate seamlessly with the tool. This feature allows projects depending on Diesel to integrate support for other database systems with a similar developer experience than the database systems supported by the main project. The extension interface also unblocks other use-cases as it provides a way to consume information about the database schema in other ways than implemented by Diesel itself. Such a extension interface enables experimentation and the development of features rejected by the main project due to limited maintenance resources.

  ▸ For more details see: https://nlnet.nl/project/Diesel-CLI

• Domino: Security Proofs that Scale — Analysis and verification of real-world cryptographic protocols

  Cryptographic protocols are the backbone of a secure and free internet. They need to be thoroughly analyzed to ensure that breaking the protocol is as hard as breaking well-studied hardness assumptions. Domino addresses this need by making the analysis and verification of real-world cryptographic protocols practical and accessible by finding a new sweet spot between reasonable expressiveness and automation. Building on our existing work, we will now further reduce the amount of work that has to be done manually, clean up our syntax and further increase usability by improving error reporting, adding editor integration using LSP, experimenting with more modular code and investing in user-facing documentation.​​​​​​​​​​​​​​​​

  ▸ For more details see: https://nlnet.nl/project/Domino

• E-Paper Open Standards (EPOS) — Standards, reference implementation and test suite for e-paper

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/EPOS

• F3D Animations, Rendering and Integrations — Cross-platform, fast and minimalist 3D viewer

  F3D is an open source, community-driven, cross-platform, fast and minimalist 3D viewer. Already integrated into many Linux distributions, F3D is packed with features that let users visualize and render their 3D models efficiently. F3D supports dozens of file formats and aims to be the go-to solution for simply taking a look at any 3D model, it also supports thumbnails and integrates well in the experience of many desktop environments. F3D is also the libf3d, a C++ API to simply and efficiently render 3D models, with C, Python, Java and Javascript bindings. As such, the libf3d is available as a python wheel on pypi, as an npm package to make F3D available as web 3D viewer, and will soon be available as a mobile app. The F3D community thrives to be inclusive and welcoming, with a clear contribution and maintenance process where everything is discussed openly with any interested parties as well as a dedicated mentoring track. This project will make a large set of improvements in many places, from web rendering and animation enhancements to improving integrations (including proper libf3d integration in FreeCAD), packaging, a friendlier and better usable user interface, polyscope-like features, support for new file formats, better CI and much more.

  ▸ For more details see: https://nlnet.nl/project/F3D-animations

• Funfedi.dev — Testing correct implementation of W3C ActivityPub

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/Funfedi.dev

• OpenPGP refresh for Conversations — Modernise OpenPGP implementation for Android XMPP client

  This project aims to modernize PGP encryption within Conversations, a Jabber/XMPP client, by integrating cryptographic operations and adopting updated messaging standards. Currently, the application relies on a third-party tool, OpenKeychain, which is no longer actively developed and utilizes brittle Inter-process communication (IPC). This work will replace this dependency with the pgpainless library, integrating encryption, decryption, and key management directly into the app to improve reliability and user experience. Furthermore, the project will implement and update the modern OpenPGP standards for XMPP (XEP-0373 and XEP-0374) by making use of Stanza Content Encryption (SCE). This transition not only benefits users who prefer PGP-based encryption but also serves as a critical building block for the development of OMEMOv2.

  ▸ For more details see: https://nlnet.nl/project/Conversations-OpenPGP-refresh

• Slint Visual Editor — User-friendly design of graphical user interfaces

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/Slint-VisualEditor

Operating Systems, firmware and virtualisation

• Pnut everywhere — Compiles (a subset of) C to human-readable POSIX shell or binary

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/Pnut-architectures

• LinuxBoot for all — Small, auditable and reproducible firmware stack

  LinuxBoot is a proven approach to replacing the proprietary UEFI DXE phase or U‑Boot runtime environment with a Linux kernel and an open initramfs, offering a smaller, auditable and reproducible firmware stack, with u‑root as the standard initramfs in hyperscale deployments and Heads used on user‑facing devices where local attestation and measured boot matter, while LinuxBoot itself remains deliberately agnostic to the initramfs used. Despite this proven track record in data centres, the knowledge has not flowed back to the broader hardware community, leaving servers, workstations and single‑board systems without accessible documentation, tooling or deployment recipes. This project brings together expertise from different areas of the open firmware ecosystem to close that gap and create a feedback loop that draws hyperscaler experience back into the LinuxBoot project itself rather than letting it remain siloed. Over the course of the project, the team will document the use of Fiano to remove unneeded DXE modules from UEFI firmware, establish reproducible build pipelines with CycloneDX/SPDX SBOMs for x86, ARM and RISC‑V hardware, and produce a revised LinuxBoot book with concrete deployment recipes for servers, workstations and single‑board systems, while a U‑Boot + LinuxBoot proof‑of‑concept on a Rockchip SBC, where LinuxBoot replaces the U‑Boot runtime environment as the in‑firmware operating system, will serve as a vendor‑facing reference to lower the barrier for hardware manufacturers to adopt LinuxBoot.

  ▸ For more details see: https://nlnet.nl/project/LinuxBoot4all

• bhyve idle load mitigation — Reduce overhead on bhyve Type-2 hypervisor

  bhyve is a BSD-licensed Type-2 hypervisor originating from the FreeBSD project. Apart from FreeBSD, it also runs on the OpenSolaris-derived illumos distributions such as OmniOS, OpenIndiana, and SmartOS. It is capable to run unmodified guest operating systems such as Windows, Linux, various BSDs, and various illumos Distributions. As any hypervisor, bhyve operates with a certain overhead, one aspect of which is the idle load caused by otherwise idle guest VMs on the host system. Naturally, less idle load means more efficient operation of the host, less energy use, and increased host capacity without the need for additional hardware. This project aims to analyze the idle load behaviour of various guest operating systems running on bhyve to identify the causes of increased idle load. Additionally, this project intends to improve the idle load behaviour by implementing support for at least one additional hypervisor feature such as paravirtualized timecounters.

  ▸ For more details see: https://nlnet.nl/project/bhyve-idle

• Ironclad - Networking developments — Real-time capable, UNIX-like operating system kernel in SPARK/ADA

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/Ironclad-networking

• LeanFTL Extreme Wear Leveling — EWLF support for Flash Translation Layer library

  This project extends Lean-FTL, a Flash Translation Layer C library targeting MCUs. This means a number of new features, such as support for very high numbers of updates, an innovative 'health status' feature (which indicates how much the device used each flash page) as well as new integrations including pico2 and arduino boards and the Zephyr real-time OS. All this will be added while preserving the fundamental advantage of lean-ftl over competing solutions: it does not need 'defragmentation' nor 'garbage collection' - so the run time of each call is bounded and independent of the total size of data managed by the Flash Translation Layer.

  ▸ For more details see: https://nlnet.nl/project/LeanFTL-EWLF

• Shinobi — An incremental AOSP build tool using Nix dynamic derivations

  Starting with AOSP (Android Open Source Project) and other ninja-based projects, Shinobi aims to offer a common platform - standalone or as a part of wider ecosystem collaboration - for Nix tools looking to provide granular, incremental, reproducible and distributed builds for their respective language ecosystems, by leveraging the up and coming dynamic derivations feature and aiming to prove it at scale.

  ▸ For more details see: https://nlnet.nl/project/Shinobi

• Web on Managarm: Usability, Stability, Security — Microkernel-based OS with consistent asynchronous I/O

  Managarm is an open source, community-developed, microkernel-based operating system that uses asynchronous I/O throughout the entire system, while also providing good source-level compatibility with preexisting Linux userspace software. This project aims to enhance the capabilities of Managarm as a platform for the web. We will improve its usability both on the client and server side, improve overall stability, and harden the system. In particular, the project will enable users to run Managarm on a diverse set of hardware to securely navigate the web and to host web services. Due to the stronger isolation offered by our microkernel and the fact that all I/O is asynchronous, our system will provide a compelling alternative to existing OSes in this space.

  ▸ For more details see: https://nlnet.nl/project/Managarm

Measurement, monitoring, analysis and abuse handling

• Portable Libre Diagnostic — Reliable open automotive diagnostics stack

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/LibreDiagnostic-Portable

Decentralised solutions, including blockchain/distributed ledger

• Garage reliability and performance — Open-source S3 compatible distributed object storage service

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/Garage-Performance

Data and AI

• DocSpec to Rust/WASM — Document conversion SDK for rich text formats

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/DocSpec-WASM

• Mapterhorn Imagery — Aggregating open data orthophoto imagery

  Government agencies across Europe collect and share aerial imagery, also known as orthophoto or visual RGB imagery, as open data. This data can be particularly useful for making street-level satellite maps. But so far only commercial actors have aggregated Europe’s open-data imagery into a unified product which developers can rely on.​ The Mapterhorn Imagery project aims to aggregate all available open imagery and share it free of charge as PMTiles downloads. ESA’s Copernicus Sentinel-2 data will serve as a global backdrop with a comparatively low resolution of 10 m per pixel. Imagery datasets with resolutions of 10 cm and better produced by local governments will enrich the map where coverage is available.

  ▸ For more details see: https://nlnet.nl/project/Mapterhorn-imagery

• QGIS Panoramax Plugin — Extension to manage Panoramax data with QGIS

  Panoramax is a digital resource for sharing and using street pictures. Anyone can take photographs of places visible from the public space and add them to the Panoramax database. This data is then freely accessible and reusable. It offers a similar service to StreetView, Mapillary, KartaView... but a with a completely open-source software stack, and fully managed by a growing open community.

  QGIS is widely deployed geographic information system (GIS) software, allowing for geospatial data visualization, processing, dissemination, analysis and more. This project will implement an industry-grade QGIS extension to manage Panoramax data directly with QGIS : get Panoramax trajectories and display images in 2D and 3D, search, download and upload batch data. Our goal is to bridge the gap between GIS users and field surveyor to promote open data.

  ▸ For more details see: https://nlnet.nl/project/QGIS-Panoramax

• Adding redaction to Cpdf — Robust, standards-compliant PDF redaction

  Proper PDF redaction is becoming vital. It no longer suffices to crudely black out text and rasterize pages, nor to use basic PDF redaction which is unaware of modern metadata, since the resulting PDF would have been stripped of all accessibility information and no longer meet common regulatory requirements such as PDF/UA. This project extends the open-source Cpdf PDF processor to support the full spectrum of PDF redaction facilities in a robust, standards-compliant fashion. The result will be suitable for human-guided individual and batch redaction to a quality suitable for personal, legal and governmental work.

  ▸ For more details see: https://nlnet.nl/project/Cpdf-redaction

• Domain-specific LabPlot — Domain specific visualisations and fit models for LabPlot

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/LabPlot-domain-specific

• Nanoarguments — Global, federated graph of scientific claims as LinkedData

  Scientific knowledge is currently scattered across papers, repositories, and disconnected platforms, with no structured way to trace how claims connect to evidence or how arguments develop. Nanoarguments builds a framework and tools for creating, browsing, and contributing to a global, federated graph of scientific discourse and evidence. Researchers and their communities can collaboratively structure claims, evidence chains, and discussion as nanopublications, which are small, cryptographically signed Linked Data snippets with precise provenance and authorship, published to a decentralized peer-to-peer network. The project builds upon the Nanodash interface to help users browse, edit, and aggregate discourse and evidence graphs, and integrates with dokieli to enable in-context authoring of nanopublications as inline annotations while reading or writing a document. A bidirectional ActivityPub connector bridges the nanopublication network and the fediverse, allowing discourse threads to start as social exchanges and crystallize into persistent, machine-readable evidence records. The project will be piloted with early adopter research groups in discourse and evidence modeling. All components will be released as open-source modules that other systems can build upon.

  ▸ For more details see: https://nlnet.nl/project/Nanoarguments

• Provability Fabric — Privacy-preserving provenance of AI agent/LLM sessions

  Provability Fabric is an open-source infrastructure project for making AI and software systems trustworthy through evidence that can be independently verified. It integrates formal verification, runtime security, and end-to-end audit trails so that claims about what a system was allowed to do, what it actually did, and whether it remained within specification can be checked across tools and workflows instead of accepted on trust. The project provides common schemas, specifications, replay mechanisms, and reference implementations for packaging and validating proofs, attestations, and execution traces. In doing so, it aims to create a shared public infrastructure for reproducibility, interoperability, and auditability in high-stakes automated systems.

  ▸ For more details see: https://nlnet.nl/project/ProvabilityFabric

• Reduce osm2pgsql resource usage — More efficient database usage for OSM data

  Osm2pgsql is used to import OpenStreetMap (OSM) data into a PostgreSQL/PostGIS database and keep it up to date. It is an essential tool of many map creation and OSM data analysis toolchains. It is used to serve millions of users daily on the OpenStreetMap project's own raster and vector map infrastructure. It is also a basis for the Nominatim geocoder. With the amount of data in OSM climbing continually, the memory and disk requirements of osm2pgsql have risen as well. In this project we want to reduce the memory and disk usage of osm2pgsql by implementing more efficient storage formats, specifically for "intermediate" data used while processing. This will not only help with resource consumption on the community run OSM servers, but also enable wider use of OSM data, even on planet-scale, in low-resource environments available to small NGOs or to students.

  ▸ For more details see: https://nlnet.nl/project/Osm2pgsql

Services + Applications (e.g. email, instant messaging, video chat, collaboration)

• Hyper 8 Video System — Self-hostable, maintenance-free video publishing tool

  The Hyper 8 Video System re-envisions video publishing on the web using static site generation – a familiar PeerTube/YouTube-like web interface for viewers meets a fast, indestructible, maintenance-free, local-first backend that can be operated both through a beginner-friendly, cross-platform GUI, as well as with advanced terminal-based and scripted workflows. In this project the feature scope, accessibility and usability will be leveled up, introducing new theming and customization options, support for chapters, built-in SFTP-based deployment, code-protected videos, and much more.

  ▸ For more details see: https://nlnet.nl/project/Hyper8

• Loops Live — Federated short video platform for the Fediverse

  Loops is a federated short-video platform - think TikTok, but open-source and built on the ActivityPub protocol so no single company controls the network. It ships as a self-hostable server with a modern web app and native mobile apps for iOS and Android, giving people a full creative toolkit including camera recording, AR filters, duets, playlists, and discovery features like Starter Kits. It exists because the most popular content format on the internet shouldn't be locked inside a single company's walled garden. Every feature, from federation to moderation tooling, is designed around the idea that communities should own their spaces.

  ▸ For more details see: https://nlnet.nl/project/Loops-Live

• Tenzu — Lightweight project management tool for agile teams

  Tenzu is a lightweight project management tool for agile teams. It is the official successor to Taiga. Tenzu aims to provide a modern experience for healthy project management practices while remaining simple to use at heart. It is an easy-to-deploy web app that uses very few resources. The first stable version was released in September 2025. Today, Tenzu offers workspaces with KANBAN boards that include rich content which can be collaboratively edited in real time. Other features include single sign-on (SSO), detailed permissions, translation into three languages, and a dark theme.

  ▸ For more details see: https://nlnet.nl/project/Tenzu

• Panoramax video uploads — Add street level imagery from user-provided video

  Panoramax is an open-source software stack to create street level imagery open alternatives. It is an open collaborative immersive views project nurtured by an international community of contributors and users, operating as a federation of instances. Currently, Panoramax only accept uploading images whereas typical cameras used for image acquisition enable "timelapse" video recordings that can provide more photos (several frames per second instead of one picture every two seconds at best, which limits the acquisition for higher-speed vehicles).

  As of today, contributors are required to pre-process their video files using local scripts to extract compatible images before uploading them. The aim of the “Video uploading for Panoramax” project is to integrate this processing on the server side to make direct video contributions possible and much simpler. The developments will have to be adapted for at least the most common cameras available on the market (GoPro, Qoocam) and deal with the different metadata formats.

  ▸ For more details see: https://nlnet.nl/project/Panoramax-video

• Element Call on Cisco Room hardware — E2EE Matrix video conferences on existing Cisco hardware

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/RoomKit-Element

• ePoc — Micro learning platform for decentralized educational resources

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/ePoc

• Internationalization (i18n) for Silex — Add i18n to GraphQL-aware static site generator

  This project develops a local-first, fully open infrastructure for web publishing. Building on Silex free/libre website builder, it introduces a git-native, forge-agnostic architecture that removes dependency on centralized platforms and allows users to work and publish entirely locally. Because it implements GraphQL, it allows to for instance synchronise content from a dynamic CMS like Wordpress - and publish it as a fast and secure static site. This project will build a cross-platform desktop client, that can be used by anyone to develop and maintain performant websites.

  ▸ For more details see: https://nlnet.nl/project/Silex-i18n

• Maturing the Gancio back-end — Better scale Fediverse-capable shared agenda for local communities

  Gancio is a shared agenda for local communities. It is focused on decentralisation and simplicity, enabling users to discover events and communities to connect and collaborate, while avoiding attention-based business models and intrusive advertisements. With Gancio about to release its next major version involving a rewrite of the whole application, this projects aims to increase the maturity of the Gancio back-end. It will build on top of the 2.0 effort and work on improving the reliability, interoperability, and maintainability of the system - as well as lowering the barriers to entry for new contributors.

  ▸ For more details see: https://nlnet.nl/project/Gancio-backend

• MetaMorph — New modules, functionalities and interfaces for voxel engine Luanti

  The project summary for this project is not yet available. Please come back soon!

  ▸ For more details see: https://nlnet.nl/project/Luanti-Metamorph

• pimsync — Reliable synchronisation for contacts and calendars

  Pimsync is standards-based tool to synchronise contacts and calendars, using CalDAV, CardDAV, WebCal and/or a local filesystem. It has proven a reliable and stable evolution of its predecessor vdirsyncer, but lacks some of the extended features on which some users rely. This project aims to implement all those extended features and edge cases, such that remaining users of vdirsyncer can migrate to a modern replacement.

  ▸ For more details see: https://nlnet.nl/project/Pimsync

• TinkerFlow — Graph based editor for VR/XR process‑authoring

  TinkerFlow is a process-building system for the open-source Godot Engine that enables non-programmers to build 2D, 3D, and XR/VR applications. By lowering the technical barrier to app development within a 3D engine, it empowers educators, students, independent researchers, and industrial engineers to create educational trainings, object viewers, and showcases. At the same time, it provides software developers with a robust, pre-built system to jumpstart new projects, skipping the boilerplate like VR setup and bootstrapping usually required when starting from scratch.

  Unlike visual scripting tools that focus on low-level operations, TinkerFlow uses high level actions such as 'grab object', 'highlight element', and 'move object'. It structures application logic into chapters of sequential steps. Each step triggers predefined behaviours (such as playing audio, highlighting objects, or spawning visual effects) and has specific conditions (such as an object being grabbed, a hardware button being pressed, or a timeout occurring). Objects can easily be added to the scene, modified by behaviours, and evaluated by conditions. This workflow-first approach delivers immediate, stable results that can be easily tested and refined. It allows users to effortlessly reuse workflows from previous applications or scenes in new processes, while advanced developers retain the flexibility to write their own code, create custom behaviours and conditions, or integrate TinkerFlow into their own systems.

  ▸ For more details see: https://nlnet.nl/project/Tinkerflow

• Upstreaming Sailfish OS ConnMan improvements — Consolidation of improvements to ConnMan connection manager

  ConnMan is a core Linux networking component used in mobile, embedded, and desktop systems. Sailfish OS has maintained a fork with over a decade of production-tested improvements — including multiuser support, firewall integration, CLAT (IPv4-over-IPv6), conf.d configuration, and improved DNS handling with systemd-resolved — many of which are not yet upstream. This project focuses on upstreaming these Sailfish OS features to reduce fragmentation, improve security and privacy, and increase interoperability across Linux platforms. By integrating these enhancements into the main ConnMan project, they will become available and sustainably maintained for the wider open-source ecosystem, benefiting both existing ConnMan users and future privacy-preserving mobile systems.

  ▸ For more details see: https://nlnet.nl/project/ConnMan

• Zrythm — Libre digital audio workstation

  Zrythm is a digital audio workstation (DAW) that enables musicians and producers to create professional-quality music. Built with modern C++ using Qt/QML and JUCE, it targets electronic music workflows with advanced capabilities such as signal-based modulation and clip looping that proprietary tools have long monopolized. Building on lessons learned from the v1 release, this grant accelerates development toward Zrythm v2, porting core functionality to the new Qt/QML stack: audio and MIDI recording, arranger editing, and chord assistance. The goal is a stable, mature alternative to proprietary DAWs that guarantees users the freedom to study, modify, and share their creative tools.

  ▸ For more details see: https://nlnet.nl/project/Zrythm