47 Open Source Projects Receive NLnet Grants to Boost Digital Autonomy

Trustworthy hardware and manufacturing

• KiCad FEM — Physical simulation of printed circuit boards

  KiCad is a free and open source electronics design application (EDA) that can handle everything from the most basic schematic to a complex hierarchical design with hundreds of sheets. It allows electronics designers to use a tool chain that itself is technically transparent, and that can be customized when needed. This project adds a finite element analysis (FEA) system for physical simulation of printed circuit boards. The proposed work will integrate with existing open source meshing and simulation systems to provide a first class, direct application of FEA to circuit specific questions. The FEA system will integrate directly with the existing PCB editor. It will read copper geometry, dielectric stackups, and component thermal data from the native KiCad data model. Results display as overlay heatmaps and isolines on the 3D board view and on individual layers.

  The outcome is the first open-source EDA tool with integrated multi-physics simulation. Designers will be able to iterate on layout and check thermal and mechanical viability without exporting to commercial tools. Educational institutions will gain a free platform for teaching PCB physics. And hardware startups will be able to validate designs before fabrication without commercial license costs that often exceed the cost of a prototype production run.

  ▸ For more details see: https://nlnet.nl/project/KiCad-FEM

• NotSundial — High-precision pose estimation for indoor robotics

  NotSundial is an open-hardware 6-DOF positioning system providing high-precision pose estimation for indoor robotics. Right now, the robotics community relies on inexpensive 2D planar markers (like ArUco) that suffer from notable angular jitter at range. The only alternatives are high-end tracking systems that remain cost-prohibitive and closed-source. NotSundial bypasses this trade-off by shifting the measurement complexity from software inference directly into physical geometry. Building on the core mechanics of the open-source "Mojoptix Digital Sundial", it relies on a 3D-printed Volumetric Angular Mask (VAM) that filters light rays spatially and angularly. Instead of inferring angles from the minimal perspective distortion of a flat pattern, a backlit VAM displays angularly dependent patterns that fully encode the 6-DOF pose into a stable photometric signal. Through this project, we will deliver a completely sovereign tracking stack: parametric scripts to 3D-print custom VAM targets, a native ROS 2 vision engine, and a public benchmarking report.

  ▸ For more details see: https://nlnet.nl/project/NotSundial

• pdsink — Modern USB Power Delivery Sink Library for Embedded Devices

  pdsink is an open-source USB Power Delivery sink stack for embedded devices. USB-C power is everywhere, yet there is no open, reusable and complete implementation of the USB PD sink side. Existing options are proprietary or binary-only vendor middleware, code tied to a single controller or framework, or partial implementations of older revisions. pdsink fills this gap with a lightweight, auditable stack implementing USB PD 3.2, including AVS. The timing is good: PD 3.2 chargers are now reaching the market. pdsink's protocol core is hardware-independent, and it already runs in a real product. The project will harden the core with tests based on the USB-IF CTS. It will also add support for widely used hardware: microcontrollers with built-in USB PD (STM32G, WCH CH32) and external PD controllers. Each driver will be developed and validated on a dedicated open development board. This will make it much easier for hardware developers to adopt modern USB PD in their own products.

  ▸ For more details see: https://nlnet.nl/project/pdsink

• Power ISA Desktop — Open Hardware Desktop prototype designed for GNU/Linux on Power ISA

  Power ISA is a feature-rich reduced instruction set computer (RISC) instruction set architecture (ISA), which unlike x86 or ARM is available under a fully open license. This project takes the first steps towards bringing this to end users in a system designed around GNU/Linux and Free Software. The project will double down on the existing work on a desktop version, getting the core computing platform stable and functional. This Desktop board would also bring the possibility to ease free software development for the Power architecture, in parallel to tackling the restrictions and complexities of a laptop form factor. An underlying goal is to encourage communities and students to acquire the skills and capabilities necessary to produce hardware and software independently and to have control over it.

  ▸ For more details see: https://nlnet.nl/project/PowerISA-desktop

• Verilog-A Device Libraries for Open PDKs — Port Open PDKs to Verilog-A standard

  Open-source PDKs are crucial in Electronic Design Automation as they make device models, design rules and data needed for design, simulation and verification, available to reproduce. But they are typically distributed in an application specific format, as so called SPICE decks - the outcomes of which depend on simulator native implementations and dialects of SPICE. This project will port device libraries to Verilog-A, the modeling language standard for analog circuits produced by the non-profit semiconductor industry consortium Accellera. Verilog-A is the continuous-time subset of Verilog-AMS. This will make PDKs easier to distribute, use, and maintain across the EDA ecosystem while reducing simulator-integration work for users and maintainers alike.

  ▸ For more details see: https://nlnet.nl/project/PDK-Verilog-A-device-libraries

• Windkit — Open hardware wind turbine

  In a context of geopolitical instability and climate challenges, with fossil fuels costs skyrocketing and energy grids struggling to meet an ever-increasing demand, renewable local energy production is not just a nice to have, but a sane path forward. Windkit is an open-hardware wind turbine, which could empower communities to take control of their local energy production and supplement classic energy sources. In the scope of this project, the team will improve the prototype towards regulatory compliance and streamline the design so it can be repaired and locally manufactured. Nominal power will be scaled up to 1kw, in order to be able to power decentralized internet infrastructure and off-grid community nodes.

  ▸ For more details see: https://nlnet.nl/project/Windkit

Network infrastructure incl. routing, P2P and VPN

• 802.11 monitoring and AP mode for FreeBSD — LinuxKPI based access point mode support for FreeBSD wireless

  The FreeBSD operating system started to use a LinuxKPI compatibility layer to provide station mode support for modern 802.11 hardware. This project will enhance the LinuxKPI compatibility layer to translate between the native net80211 wireless stack and permissively licensed Linux wireless drivers. For one, we will add monitor mode support in order to help technical analysis, debugging, and research; for the other the project will implement basic AP mode filling another gap on the way to a fully permissively licensed, modern wireless stack.

  ▸ For more details see: https://nlnet.nl/project/FreeBSD-wireless-AP-mode

• GStreamer WebRTC with librice — Integrate librice into GStreamer multimedia framework

  WebRTC is a now almost ubiquitous standard for conference calls. This project will implement missing features required for utilising GStreamer's Rust implementation of WebRTC. Such additional features include support for retransmissions (RTX), and Forward Error Correction (FEC).

  GStreamer's Rust WebRTC implementation is the first initial user of librice and requires some additional features within librice. These additional features would include support for DNS resolution of STUN/TURN servers and mDNS ICE candidates, as well as HTTP proxy support for TURN for the most restrictive of network environments.

  ▸ For more details see: https://nlnet.nl/project/GStreamer-WebRTC-librice

• Reticulum-rs daemon — Distribution ready rnsd-rs daemon with broad interface support

  Reticulum is a cryptography-based networking stack that lets communities build resilient, decentralised networks over almost any medium, from long-range radio to local networks and the internet, without depending on central infrastructure. Several independent implementations exist, but the ecosystem lacks a portable configuration format, documented feature coverage and systematic interoperability testing. This project develops a standalone Rust daemon for Reticulum, validates its interoperability with existing implementations and makes it available through the package managers of major Linux distributions. The outcome is a tested, documented and easily installable Reticulum node that enables operators to establish and maintain their own networks, including during outages and internet shutdowns.

  ▸ For more details see: https://nlnet.nl/project/reticulum-rs-daemon

• TRDP_SDR — Development Platform for Software Defined Radio

  This project extends the existing open-source Tronex Radio Development Platform (TRDP) Software Defined Radio (SDR) by developing new hardware and gateware and software modules, with the ultimate goal of making a generic, cheap, and flexible SDR board available to makers, researchers, and amateur radio operators for experimentation. A generic six slot expansion carrier board will allow to make use of among others a GPS Module (to support GNSS systems like Galileo, GLONASS and GPS), an SDR module utilizing the AD936X chip (offering higher bandwidth than the current modules and a wide frequency range) and a module for the LMS7002M. The project will also port the OpenWiFi stack and an existing GPS Receiver, as well as develop libraries and firmware for SoupySDR and Gnuradio compatibility to the TRDP ecosystem. All gateware developed within this project will be open source and deployable to the Zynq FPGA via the openXC7 open source tool chain.

  ▸ For more details see: https://nlnet.nl/project/TRDP_SDR

Software engineering, protocols, interoperability, cryptography, algorithms, proofs

• BabelBuild — Flexible, recursive build system levering execve memoisation

  These days software does not come in the magnitude of thousands of lines, but rather millions and billions of lines. Looking software distributions such as NixOS, Fedora or Debian, special approaches have been developed for distributing software at large scale. These approaches make trade-offs such as lacking incremental builds required by developers of individual software components. BabelBuild is an experiment with a new build unit primitive that inherits ideas from and is a superset of Nix and Bazel, enforcing isolated builds with a well-described build environment and the software builds repeatable, but it brings new flexibility and can eventually allow an entire software system to be transparent down to the compilation unit while re-using the build graph descriptions of existing build systems.

  ▸ For more details see: https://nlnet.nl/project/BabelBuild

• Better Sound for Open Source Video Calls — Voice isolation and optimization for FOSS conferencing tools

  Speech on web based videoconferencing is notoriously hard to get right, as microphones pick up ambient audio as well. This project will deliver speech optimisation for FOSS video calls platforms by integrating WASM based sound quality improvements - which is compatible with E2EE and which can run client-side, allowing the user to have nicer audio while not straining the conferencing servers. Well-processed audio makes voices sound more natural, engaging, and pleasant, which reduces listener fatigue, supports concentration, and enhances overall communication.

  ▸ For more details see: https://nlnet.nl/project/VideoCall-VoiceOptimisation

• CDoc — Persistent embedded conflict-free replicated document

  CDoc is an embedded database that will enable efficient synchronization for P2P applications. Its goal is to address common problems and pain points that other frameworks of this kind stumble upon when they move from demo to production. CDoc aim to make collaboration features more accessible to developers, without requiring extensive knowledge in the field.

  ▸ For more details see: https://nlnet.nl/project/CDoc

• Distributed Slips Immune — Open, distributed, machine learning-based intrusion prevention system

  Distributed Slips Immune advances Slips toward an open Internet Immune System: a distributed defensive architecture where computers cooperate to detect, understand, and contain attacks. The project will introduce lightweight cross-platform Slips Agents, improve continuous operation on constrained devices, develop new adaptive detection mechanisms inspired by immunology, add local containment and deception capabilities, and explore distributed AI where local models cooperate on security decisions. At its core, SlipsNet will provide the coordination layer that lets peers exchange alerts, evidence, trust signals, and learned knowledge, turning individual Slips deployments into a cooperative, self-regulated defense system for the local network.

  ▸ For more details see: https://nlnet.nl/project/Distributed-Slips-Immune

• Erlang-Red — Visual Flow Based Programming for Erlang

  Erlang-Red brings visual flow based programming to the BEAM. Heavily inspired by Node-RED, Erlang-Reg provides the same visual experience for Erlang and Elixir. It leverages core BEAM features such as lightweight processes, message passing, immutable data structures, and provides visual representations of core Erlang OTP design principles such as state machine, supervisor and event handler. This grant allows the project to extend the visual programming concepts to change management, providing visual change management (that is, version control) for both Erlang-Red and Node-RED codebases.

  ▸ For more details see: https://nlnet.nl/project/Erlang-RED

• GNUnet PQ-migration — Modernise GNUnets cryptographic security architecture

  This project aims to migrate GNUnet's cryptographic inventory and protocols to post-quantum cryptography. This includes the migration of multiple core cryptographic schemes and protocols to their PQC-alternatives, ideally in a backwards-compatible manner (drop-in replacements and hybrid schemes). Selection of suitable PQC schemes in GNUnet is challenging due to its strong attacker model and non-commodity cryptographic primitives used in its protocols such as public-key blinding and blind signatures.

  ▸ For more details see: https://nlnet.nl/project/GNUnet-PQ-migration

• IPSIS protocol creation and development — Rust library unifying real-time control data, audio and video

  IPSIS provides an open-protocol and open-source Rust library unifying real-time control data, audio and video through a single cross-platform API, targeting media arts use cases. Building on experience from OSCQuery, ossia and Scenic, it will automatically select suitable transports, from local shared memory to internet streaming, to provide the lowest possible latency and best possible performance in each situation. Its integrations with creative software will simplify connections between tools for interactive installations, live performances and remote creation and collaboration.

  ▸ For more details see: https://nlnet.nl/project/IPSIS

• Scala bootstrap — Reproducible full source bootstrap for Scala in Guix

  Scala is an important programming language in the JVM ecosystem. Currently it depends on an existing Scala compiler to bootstrap. This project will provide a bootstrap path based on software already included in Guix, thus allowing auditability and better supply chain security for Scala-based software. This is expected to improve bootstrappability for the JVM ecosystem as a whole - in particular due to Scala's importance for bootstrapping Gradle, a widely used build system for Java, Android, and Kotlin developers.

  ▸ For more details see: https://nlnet.nl/project/Scala-bootstrap

Operating Systems, firmware and virtualisation

• apparmor.d — Restrict software capabilities with per programme profiles

  AppArmor is a security feature built into Linux that restricts what each program on a computer is allowed to do, so that a compromised or misbehaving application cannot reach the user's files, passwords or the rest of the system. It is powerful, but writing the rules is difficult, and in practice very few programs are protected by it. apparmor.d is a collection of about 2000 ready-to-use AppArmor profiles that confine the entire system, from the core services that start the computer to desktop environments, web browsers and everyday applications. This project aims to make it reliable enough to be switched on by default: automated tests, clearly documented security and threat model, tools that let users choose a security level and adapt profiles to their own setup, and modular packages that distributions can adopt piece by piece.

  ▸ For more details see: https://nlnet.nl/project/apparmor.d

• asyncnss — New async implementation of NSS/Name Service Switch

  At the deepest, lowest levels of the software stack, some functions - such as getaddrinfo() that performs name resolution - are ubiquitously used by applications, they are synchronous (they do not return until they have the full result), and they potentially make network calls, which may block for unbounded amounts of time. This is a problem when an application needs to make several calls to these functions: either they call them serially which compounds the waiting time, or they resort to workaround strategies which makes them significantly more complex. asyncnss solves this by providing an asynchronous API to a set of commonly used synchronous libc functions, with a mechanism that integrates seamlessly with classic Unix asynchronous event loops. It also isolates glibc's nsswitch module loading in a separate process, tightening the security of the client application.

  ▸ For more details see: https://nlnet.nl/project/asyncnss

• BinB — High-performance Linux userspace emulator

  BinB is a high-performance Linux userspace emulator (pure Rust, all in browser/WASM for privacy) that runs real x86, x86-64, and ARM64 ELF binaries by interpreting machine instructions, emulate Linux syscalls with static and dynamically linked programs via a virtual sysroot, syscalls (I/O, mmap, futex, networking opt-in, and more), and clearly analyst-oriented tooling including step debugging, strace-style tracing, GDB remote debugging, YARA memory scanning, and time-travel debugging, so users can safely analyze quickly and debug Linux binaries, even malware, without a full guest OS.

  ▸ For more details see: https://nlnet.nl/project/BinB

• Dasher v6 — Predictive text entry without a keyboard

  Dasher is a legendary text-entry system enabling the fastest writing speeds available for users who control a computer via continuous movement like head tracking, eye gaze, or joysticks. Despite its 25-year legacy as a lifeline for disabled people worldwide, the codebase has suffered from a lack of maintenance. This project delivers a complete modernization of Dasher, integrating fresh user experience research and modern architecture. By rebuilding the system with direct input from accessibility design squads, Dasher v6 will streamline onboarding, improve prediction pipelines, and secure a sustainable, open-source foundation for the next generation of assistive communication.

  ▸ For more details see: https://nlnet.nl/project/Dasher-v6

• libLISA — Tool to improve x86 (dis)assemblers, Emulators and Binary Translators

  libLISA is a tool that can fully automatically analyze an x86-64 CPU and infer instruction semantics. This project aims to use the semantics produced by libLISA to improve the accuracy of binary analysis tools, such as disassemblers and emulators, by finding bugs in the instruction semantics they use. We will extend libLISA to x86-32 and x86-16, build verification tools to compare the semantics in binary analysis tools against those produced by libLISA's analysis, and run this verification on several popular open-source binary analysis tools. We will investigate any discrepancies found, and contribute patches for bugs we identify.

  ▸ For more details see: https://nlnet.nl/project/libLISA

• Maturing MesCC — C bootstrapping C compiler for Full-Source Bootstrap for x86_64, x86, Aarch64

  GNU Mes and MesCC are essential ingredients of the Full-Source Bootstrap, as implement by GNU Guix. Such a full-source bootstrap addresses the "Trusting Trust" problem as laid out by Ken Thompson in 1984: persistent hidden backdoors can be added to software in the toolchain used to bring up the system. The solution is to drastically reduce the footprint of that toolchain, so there is only code that can be understood and no place to hide anything else. Maturing MesCC to support a native Linux-x86_64 bootstrap using an unpatched TinyCC instead of an ancient, heavily patched fork ("bootstrappable-tcc") will greatly enhance the inspectability, transparency and malleability (hackability) of this important bootstrap work.

  ▸ For more details see: https://nlnet.nl/project/MesCC

• Operese — Windows to Linux migration tool for non-technical users

  There is an increasing appetite among users, businesses, and governments for a free OS to replace Windows. There are a number of reasons for this, chiefly older computers with Windows 10 being ineligible to upgrade to Windows 11, and an increased emphasis being placed on digital sovereignty. The Linux desktop has made dramatic strides forward in recent years and is well-positioned on a technical level to meet this demand, but still struggles with adoption. Operese is a Windows to Linux migration tool which reduces the friction of switching by automating the installation process; it seamlessly transfers user accounts, files, applications, and settings in place on the user's hard drive, thus making a free OS accessible to non-technical communities. This grant will fund full-time work on the project improving automated testing, expanding hardware support, and implementing migration pathways for more applications and settings.

  ▸ For more details see: https://nlnet.nl/project/Operese

• user-notify — Rust library for implementing native notifications in apps

  User-Notify is a rust library for implementing native notifications in apps. It wraps native system APIs in a cross-platform way, allowing developers to focus on their own app instead of having to implement such a basic feature over and over again. In the scope of this grant the team will fix remaining bugs, review security and provide tutorials to make User-Notify production-ready and easy to use.

  ▸ For more details see: https://nlnet.nl/project/user-notify

Measurement, monitoring, analysis and abuse handling

• Crawler defense with iocaine — Lightweight memory-safe mechanism against undesired scraping system

  Iocaine is a lightweight crawler defense system, designed to stay out of the way of humans (operators and visitors alike). Through this grant, iocaine will be made even easier to set up and operate - both by providing plugins for major reverse proxies, and through a new script module library and configuration system - and become even less visible for the human visitor by improving its crawler detection mechanism.

  ▸ For more details see: https://nlnet.nl/project/iocaine

Middleware and identity

• Gorgon usability — Continuous integration testing for PRs against software dependencies

  A longstanding challenge of FOSS development is that few users test development versions of software. This means that bugs make it into stable releases, annoying thousands of downstream users. Gorgon is a CI system that will not only test PRs for your project, but it can be used to run your project's tests against PRs for your dependencies as well. This will let you identify which changes to your upstream dependencies you should care about. You'll be able to find and report bugs before they make it into a release, and know which upstream discussions to get involved in. This project will expand Gorgon to free and open source forges such as Forgejo, gather more data and split up monolithic builds into many small targets (e.g. individual nix derivations) to avoid duplicate work and allow more intelligent scheduling across a compute cluster, and improve ergonomics.

  ▸ For more details see: https://nlnet.nl/project/Gorgon-usability

Decentralised solutions, including blockchain/distributed ledger

• FileSender Open Cloud Mesh — Move very large files across remote data storage systems

  FileSender is an open-source, web-based application for sending large files quickly and securely, that is licensed under the BSD license. Among others, Filesender has become the de-facto tool for data transport among universities. Currently, FileSender can upload files from the sending user’s local computer and download it to the recipient user’s local computer. This project will add support for an emerging standard call Open Cloud Mesh, which would allow users to directly move files from and to any OCM compatible storage solution. This functionality not only simplifies workflows, but makes possible scenarios where the saving of files in intermediate locations is either impractical or proscribed by policy or regulation. This functionality would de-silofy lots of data and help to create more data portability, even for the very largest of files.

  ▸ For more details see: https://nlnet.nl/project/FileSender-OCM

• Zero Data Apps — Git-backed remoteStorage for web apps

  This project enables web apps to use Git forge repositories as a backend, enabling data versioning and various integrations with CI systems or workflows; file edits on your local machine can sync to client-side web apps. Self-hosting instances for your community is made simple with packages for one-click panels like Cloudron, Caprover, and Coolify, and an admin UI for adding accounts; instance admins don't need to maintain data custody, as people bridge external data and can swap servers any time. The remoteStorage API and client library both simplify sync for browser apps running as static sites. This project aims to integrate Dropbox, Google Drive, iCloud Drive, self-hosted Forgejo, Git over HTTPS, and tangled.sh; simplify first-time setup and 'bring your own credentials'; package for Easypanel, SelfPrivacy, YunoHost, and Co-op Cloud; and build bot signup guards to support an open-access community server and all self-hosted instances.

  ▸ For more details see: https://nlnet.nl/project/ZeroDataApps

Services + Applications (e.g. email, instant messaging, video chat, collaboration)

• ActivityPub4J — Reusable ActivityPub Foundation for Java

  ActivityPub4J aims to make the Fediverse more accessible to the Java ecosystem. While ActivityPub enables independent services to communicate through an open standard, Java developers currently lack a mature and reusable foundation for adding this capability to their applications. ActivityPub4J will provide an open-source, framework- independent Java library with the essential building blocks for secure and interoperable federation, backed by documentation, automated testing, and real-world interoperability testing. The library will also be put into practice in the open-source projects FitPub and Komunumo, providing real-world validation across different application domains and helping ensure that it is practical and easy to adopt. Instead of having to implement ActivityPub from scratch, developers will be able to build on this common foundation, making it easier for new Java-based services to become part of the open and decentralised social web.

  ▸ For more details see: https://nlnet.nl/project/ActivityPub4J

• DataLab Timeseries Support (DTS) — Scientific data processing and visualization

  DataLab Timeseries Support (DTS) will extend DataLab, an open-source scientific data processing and visualization platform, with native support for time series. Alongside its existing signal and image analysis capabilities, the project will enable users to import, visualize and process time-stamped, multichannel datasets through an accessible graphical interface, without requiring programming skills. It will provide common analysis tools, including resampling, filtering, segmentation and statistics, together with interoperability with the Python scientific ecosystem. Documentation, tutorials and example datasets will support adoption by researchers and engineers. All processing will remain local, allowing users to work offline and retain control of their data.

  ▸ For more details see: https://nlnet.nl/project/DataLab-Timeseries

• DSK — Management system for Fediverse content creation and publication

  When institutions pivot their social media presence from proprietary platforms to decentralised ActivityPub based social media, they often struggle with the comparative lack of professional planning and management interfaces for (multichannel) social media. This project will develop a social media management tool integrating the major Fediverse services: Mastodon, Mobilizon, Peertube, PixelFed and Loops. Features include an editorial management system for content creation, different roles and permissions (to make it easy to onboard new members of a team), a ticketsystem for mentions and direct messages, GDPR compliant analytics and metrics, and smart features for automatic imports from RSS and promoting content across platforms with either retoots or reminders that events are happening. As such this project will help non-profits and public institutions to manage their broader presence on the Fediverse.

  ▸ For more details see: https://nlnet.nl/project/DSK

• Gajim Audio and Video Calls — E2EE calling for cross-platform versatile XMPP client

  Gajim is a free and open-source instant messenger for all major desktop operating systems, such as Linux, Windows, and macOS. Based on XMPP, it enables federated and provider-agnostic communication, secured with modern encryption standards such as OpenPGP and OMEMO.

  This project aims to extend Gajim's text and rich-media messaging by implementing encrypted audio and video calls, ensuring interoperability with other XMPP clients by relying on the same standard protocols based on Jingle and WebRTC (XEP-0167, XEP-0176, XEP-0177, XEP-0353).

  ▸ For more details see: https://nlnet.nl/project/Gajim-AV

• Harefoot — Beautiful, accessible, cross-compatible technical documents in the terminal

  Harefoot creates a clean, fully accessible, beautifully presented, POSIX-compatible workflow for authoring data-centric technical documents from the terminal. Works equally on old hardware and new, for blind people and sighted, with tabular, graphing and diagrammatic data integration. The project builds on and integrates existing tools for converting between document and formats, and for working with spreadsheets, tabular data, graphing and diagrams. The goal is to have clean, semantic outputs with integrated auditing and versioning. Harefoot is targeted at people authoring technical documents, but doesn't require familiarity with dozens of tools to manage those workflows manually from terminal. The user interface is accessible-by-design on all screens, screenreaders, and Braille displays.

  ▸ For more details see: https://nlnet.nl/project/Harefoot

• Sylk Persistent Group Chat — Encrypted enterprise-ready persistent group chat over SIP

  Sylk is a feature-rich standards based communication suite and conferencing server. Originating from the SIP world and building on a mature protocol stack, it provides a FOSS softphone alternative to proprietary platforms. Currently, Sylk supports end-to-end encrypted one-to-one messaging and multiparty audio / video calls. This project will add fully encrypted group chat capabilities, bringing end-to-end encryption to multiparty conversations. This development would help position it as a privacy-first alternative to mainstream platforms for individuals and businesses, while maintaining its core strength of being a self hostable, standards-based communication platform.

  ▸ For more details see: https://nlnet.nl/project/Sylk-EncryptedGroupchat

Vertical use cases, Search, Community

• Dokieli Knowledge Organisation — Standards-based writing, annotating and publishing on the web

  Dokieli is a free and open source editor for writing, annotating and publishing on the web, designed around user autonomy and universal access. Built entirely on open web standards, it shows how much control people can have over their own identity, data and publishing. Content lives in storage people choose, works with any tool that follows the same standards, and dokieli's core is available as reusable libraries. dokieli does not track, profile, or collect data about you.

  This project extends dokieli into a decentralised content and knowledge management system, filling a gap in the decentralised web ecosystem. Researchers, journalists and writers often spread their notes, sources and drafts across separate services. The project adds a dashboard and search across a person's storages, shared tags and templates, a visual map of their work, and role-based sharing. Saved annotations can be brought directly into an article, with citations kept connected to their sources so readers can trace and respond to claims. Publishing reaches the social web, with quality checks and archiving. The result is a unified workflow from research to publishing and feedback, in which people keep ownership of their content.

  ▸ For more details see: https://nlnet.nl/project/Dokieli-KnowledgeOrganisation

• dp-group-stats — Privacy preserving statistics about sensitive data from small groups

  How do you repeatedly publish useful numbers about a small group, such as the actual working hours of cardiologists in a state, without exposing anyone in it? The math exists: k-anonymity and differential privacy. But general-purpose libraries are made for one-off statistical analyses. They don't handle the same small groups being published repeatedly, so the protection wears away. dp-group-stats is a free, open-source Python library for this problem. Every publication runs through the same safeguards: contributions are clipped, groups that are too small or dominated by one person are held back, and a rule stops a statistic from leaking information when it appears or disappears. A privacy budget is tracked for each person across all releases and groupings, so that repeated publication can never spend more than an annual cap. The pipeline already runs in production in Open Working Hours, an app where healthcare workers in Germany document their real working hours. The grant turns it into a general library for publishing numbers about small groups, whatever those numbers measure: the whole pipeline packaged as one function, so no safeguard can be skipped; a guided setup that shows how parameter choices trade accuracy against privacy; a threat model and adopter documentation; and tighter privacy accounting (zCDP/PLD).

  ▸ For more details see: https://nlnet.nl/project/dp-group-stats

• Economiverse — Federated, open-source e-commerce ecosystem powered by ActivityPub

  As far as e-commerce is concerned, small businesses and makers generally turn to centralized, proprietary solutions. These allow users to browse through products from multiple shops in one place, but merchants pay a high price: loss of control. This project will develop a federated e-commerce ecosystem based on the ActivityPub protocol. They focus on a simple shop system and the creation of a marketplace enabling search and browsing. Users will be able to browse through products from multiple federated shops in one place, providing the name, image, description, shipping info and price of a product. They can communicate with sellers and directlyfollow shops to receive notifications about new products without gatekeepers. An allow-list for participating shops can be used to create a network of trust that can reduce the risk of scamming.

  ▸ For more details see: https://nlnet.nl/project/Economiverse

• Equal Earth Web Maps — Maps with accurate relative land sizes and other alternative projections

  Replace Mercator with a fair and corrected map view in any zoomable open-source map. This practically addresses the recent United Nations resolution: one line of code in any existing application or website makes the switch to a fair world visualization. It preserves existing interaction and functionality including markers and overlays, while supporting dynamic centering, the deepest zoom levels and any map style. It also implements alternative projections and is available to thousands of MapLibre GL JS developers reaching hundreds of millions of people, building the Next Generation Internet.

  ▸ For more details see: https://nlnet.nl/project/EqualEarthMaps

• Fix my panorama — A mobile app to contribute street imagery to Panoramax

  Panoramax is an immersive views project. It is a digital, collaborative, free and open community. Access to the photos is free. Panoramax operates as an instance or federation of instances for hosting images. To date, most contributions are made using web interfaces that are not really suitable for smartphones. However, this is an important lever for increasing the number of contributions - what do you carry with you when you are on the road? The aim of this project is to enable contributions from smartphones, making contributions easy for everyone. The application will enable geolocated and sequenced photos to be taken and uploaded to the various Panoramax community instances.

  ▸ For more details see: https://nlnet.nl/project/FixMyPanorama

• Hister — Self-hosted search platform for web history and stored files

  Hister is a self hosted, open source, privacy focused search platform for finding information in visited web pages and stored files. It combines automatic browser capture, website crawling and content imports with full text search, optional search by meaning and offline previews of saved content. Users can access it through a web interface, terminal or an API.

  ▸ For more details see: https://nlnet.nl/project/Hister

• NodeBB Groups — Software for groups-based communities in the Fediverse

  Facilitating the needs of groups and communities requires specific functionality which isn't widely available outside of a limited set of proprietary platforms such as Facebook Groups. Due to the current geopolitical situation, this lack of functionality keeps people that want to migrate away from such platforms locked in.

  The ActivityPub powered NodeBB project provides a strong basis of community forum software, which could be a decentralised alternative to corporate owned and operated social media. This project will help NodeBB to implement many of the missing features -- polls, marketplace, location-aware services -- and build a migration tool, to facilitate adoption and grant users choice and data portability.

  ▸ For more details see: https://nlnet.nl/project/NodeBB-groups

• Open Food Facts SKOS export — Revealing the hidden potential of Open Food Facts taxonomies

  Open Food Facts is a collaborative database containing data on close to 5 million food products from around the world, in open data. It contains multilingual taxonomies for e.g. food categories, ingredients, packaging, processing. This project brings the richness of the Open Food Facts multilingual taxonomies to scientific and app builders through the use of Simple Knowledge Organization System - a W3C recommendation designed for representation of thesauri, classification schemes, taxonomies, subject-heading systems, and other types of structured controlled vocabulary. This retains better data consistency, saves users from the trouble of ad hoc converting, and enabling new innovations. The project will bridge Open Food Facts with the semantic web, and in addition provide an easy to use, self-deployed, service to serve common use cases for applications dealing with food.

  ▸ For more details see: https://nlnet.nl/project/OpenFoodFacts-SKOS

• Open Library FastAPI — Internet Archive's free and open catalogue of the world's books

  Open Library (OL), an initiative by the Internet Archive, is the world's largest digital public library, accessible to anyone with an internet connection. In recent years, the website has struggled to keep up with increased traffic and frequent DDoS attacks, resulting in major slowdowns and outages. This project will increase the resilience and performance of OL by upgrading the most-visited HTML endpoints to FastAPI, replicating the recent successful migration of its JSON endpoints. Additionally, the project will expand Open Library’s role in the federated web by implementing connections with BookBrainz and Inventaire. Ultimately, this project takes critical steps toward resilient global access to millions of books while strengthening collaboration across the broader open knowledge commons.

  ▸ For more details see: https://nlnet.nl/project/OpenLibrary-FastAPI

• SUMA-Kit — One-stop search engine hosting toolkit

  SUMA-Kit is an open-source software toolkit for building search engines written in Rust. While SUMA-Kit is compatible with large indexes like the European Open Web Index or news index data from Mastodon, a simple search engine can be built with just SUMA-Kit and a config file. SUMA-Kit provides a web server and takes care of all the technicalities. SUMA-Kit specifically targets commodity hardware and supports open standards like the OpenSearch protocol to enable easier entry into search engine building.

  ▸ For more details see: https://nlnet.nl/project/SUMA-Kit

• TiBillet × GNU Taler — Privacy preserving payments for TiBillet ticketing/payment platform

  TiBillet is an open-source ticketing and cashless payment platform used by more than 300 cultural venues, festivals, associations and third places. This project will integrate GNU Taler into TiBillet, providing an open alternative to the payment systems currently used by the platform. The work will cover Taler payment flows, cashless payments at events, QR-code payments and support for complementary currencies. It will also bring together TiBillet’s existing ticketing, wallet and point-of-sale components into a simpler architecture. The new features will be tested with existing TiBillet users and documented for deployment by other organisations. All the resulting code will be released under AGPLv3, including a reusable Django/Python Taler integration that can be used by other projects.

  ▸ For more details see: https://nlnet.nl/project/TiBillet-GNUTaler