The OSC team is fully remote and spread across the globe, but once a year, we come together in person to reflect, plan, and connect. The week of September 15, we’ll be gathering in Barcelona for this year’s retreat. During this time, we’ll continue to process expenses on Tuesdays and Thursdays, though the timing may shift a bit. For everything else, thank you in advance for your patience if response times are slower as we travel in the days leading up to the retreat and throughout that week.

Yesterday, OSC published a post about Salt Typhoon. TLDR: The US and its allies have declared a national defense crisis. Critical open source dependencies are an attack vector for state actors. We recommend that you contact your mobile service provider to lock down your account and use biometric-protected passkeys instead of relying solely on SMS as a two-factor authentication solution. 

For more details, see our post. But above all, take action now to secure your accounts.

Behind the scenes, we’ve been reviewing hosted member project repositories to better understand which projects may no longer be active or may no longer meet our hosting policies. With more than 2,500 projects under fiscal hosting, it’s a big effort that takes time and care. We're grateful for your understanding if you’ve been contacted as part of this process. Once the review wraps up, we’ll share more about how we conducted this review and what we learned.

As an update from last month: in order to continue offering PayPal for expenses, we’ve put a new practice in place around payee verification. For now, payments can still be made through PayPal, but the process may now involve a few extra steps for both OSC and the payee. If you or one of your payees receives expenses via PayPal and will need to go through one of these extra steps, the OSC team will let you know and walk you through these additional steps.

If you’re an admin of a hosted project, please let your payees know that while PayPal remains an option for most individuals, using a bank account is often faster and can save the project money on third-party fees.

We’re continuing to monitor this and exploring how we can best offer flexible payment options while working within the realities of nonprofit requirements and global compliance. This process is a work in progress and may change over time.

If you have any questions, don’t hesitate to reach out at [email protected]

We’ve refreshed our Privacy Policy to make it clearer and easier to understand. Take a look here.

OSC is a proud sponsor of All Things Open 2025. We have a limited number of discounted tickets available, so if you’re interested, please get in touch at [email protected]. If you’ll be in the area and would like to attend but cost is a barrier, please reach out – we may be able to help cover admission.

In August, OSC welcomed 23 projects to our fiscal hosting program. A big welcome to Appraisal-RB, Authlib, Buefy Developers Collective, COMBINE, Conjured Ink Collective, FLOSSKosova, Galtzo FLOSS, Kettle-RB, Lazer Database, litexlang, MangaBaka, Netgoat, OOZE - Modern MediaWiki Development, Open Identity Platform,Pawn Appétit, Project AIRI, Resque, RuboCop-LTS, Ruby OpenID Collective, Seed4J, The Borr Project, wawjs , and wuchale. Welcome!

That’s all for now! As always, feel free to reach out to the OSC team directly at [email protected] or on Discord in the #open-source-collective channel: discord.opencollective.com