The Community for Open Collaboration
and Innovation

In late March 2025, a security researcher in our community reported a security concern about a publicly accessible API endpoint containing user information on accounts.eclipse.org. After reviewing the issue, we determined this API endpoint was unnecessary and have since disabled it. We looked through our access logs for the past few months and confirmed that the only requests were from the security researcher and the Eclipse Foundation staff who verified the report.  

The report uncovers challenges related to open source support and Big Data management: Organizations using EOL software were almost three times more likely to have failed a compliance audit last year and 47% of organisations that handle Big Data expressed low confidence in the administration of those technologies.

The Eclipse Foundation is paving the way for a thriving, data-driven economy. In our new positioning paper, Building a Future of Digital Sovereignty and Innovation at the Eclipse Foundation, we dive into the different ways we are making this vision a reality. 

How can organisations harness the power of AI without compromising on security, adaptability, or sovereignty? Our executive director Mike Milinkovich looks at how open source AI tooling offers a sustainable path forward, and a path that puts control back in the hands of developers.  

Commodity software for vehicles is increasingly being developed as open source. But the community and companies need to further develop their self-image.

On 27 May, Open Regulatory Compliance is hosting a panel, “The Cyber Resilience Act and Open Source: What Maintainers Really Need to Know,” which will be live-streamed by GitHub as part of Maintainer Month.