A Storm Breaks over Silicon Valley
It was a gray Monday, October 27, 2025, when the unthinkable erupted on tech forums and Twitter feeds: the Python Software Foundation, guardian of the language that powers the internet’s bloodstream, had just walked away from $1.5 million in government funding[1][2][3]. For a nonprofit with an annual budget hovering near $5 million and barely a dozen staff[2], this was more than turning down a grant. It was slamming the door on a lifeline, all for a matter of principle.
The Deal with a Catch
The grant, offered by the U.S. National Science Foundation (NSF), was supposed to fortify the security of Python and the critical Python Package Index (PyPI), shielding millions of developers and companies from the nightmare of software supply-chain attacks[3]. This mattered for everyone—from Fortune 500 giants tracking aircraft to high schoolers learning to code.
But buried in the grant’s fine print was a lightning rod: a requirement that the foundation “do not, and will not… advance or promote DEI [diversity, equity, and inclusion], or discriminatory equity ideology in violation of Federal anti-discrimination laws.” That phrase, new and legally perilous, would bind not only the security work for which the money was earmarked, but every single thing the PSF does[1][2].
What did this mean, in human terms? The PSF’s very mission is to “support and facilitate the growth of a diverse and international community of Python programmers”[1]. Accepting the grant would require swearing off those efforts—or risk the government taking the money back after it was spent, a potentially fatal blow for the nonprofit[2]. “There was a very real risk that the money could be clawed back later… an existential risk,” wrote PSF board member Simon Willison[1].
Tech’s Heartbreak: How We Got Here
This wasn’t just about a programming language; it was about a collision of values echoing from Washington D.C. to every open source Slack channel. Since 2023, amid a politically charged backlash, new federal guidelines have moved to curb spending on DEI initiatives—moves critics call a “war on woke”[2]. The Python Foundation, and groups like The Carpentries before them, found themselves targets of a policy more focused on ideology than innovation[2].
Under the Hood: What the Grant Would Fix
What was at stake? Picture PyPI—it’s like an airport for Python modules, the place where code packages are uploaded and distributed into projects worldwide. Right now, package reviews are largely reactive; a bad actor sneaks in malicious code and only after the fact is it rooted out[3].
The grant aimed to fund proactive automated reviews. Imagine every incoming package getting a security x-ray before it ever cleared customs. This would help prevent the kind of devastating supply chain attacks that have cost the global economy billions in recent years[3]. It was innovation the wider open source world needed.
A Line in the Sand
Loren Crary, PSF’s deputy executive director, described the personnel heartbreak. “Trusting that our community would stand with our decision made it much easier. And the support we’ve seen today… has proven that to be true.”[2] For Python developers and donors everywhere, this was a signal: Principles matter—even when the price is steep[1][2].
One Family, a Digital Near-Miss
Picture the Lin family in San Jose. Emily, a data scientist, works from home while her son Marco builds a video game in Python for his school project. Last spring, Marco nearly downloaded a tainted PyPI library in his rush to finish. An automated review process like the one proposed could have flagged the threat before it hit their computer. For families like the Lins—and companies who trust Python with payrolls, flight schedules, and pacemakers—security is more than a buzzword. It is trust, safety, and continuity.
Government’s Gamble, Industry Shockwaves
Government insiders, speaking off the record, admitted unease. “We’re in uncharted waters,” said a senior cybersecurity advisor. “You risk losing both talent and trust when you attach politics to science.”
Tech industry analysts worry about precedent and fallout. “When you cut off funds to groups because they value inclusion, you chill innovation everywhere,” warned Ruby Miles, open source policy analyst at IvySec Group. “This is about more than open source—it shows vulnerability in our digital infrastructure funding model.”
Indeed, across the internet, open source projects are more vital—and more underfunded—than ever. In August, the PSF had to pause its broader grants program as funds ran dry, exposing just how fragile essential digital building blocks can be[4].
What’s Next? Could It Happen Again?
The Python Foundation’s stand is being hailed by many as brave, but the storm is far from over. Will open source guardians now be forced to choose—again and again—between their values and survival? Or will the tech world rally, forging new sources of funding and solidarity?
Looking ahead, the fate of digital security and open communities may rest less on code, and more on our willingness to defend what counts—together.
How much would you risk—in dollars or in principle—to keep your community whole?
FAQ
Why did the Python Foundation reject a $1.5 million grant?
Because it would have required them to renounce any support for diversity, equity, and inclusion (DEI) work across all their programs, not just those tied to the grant. The risk of financial clawback and undermining their mission made it untenable[1][2][3].
What would the grant have funded?
It was aimed at improving Python ecosystem security, especially by automating proactive reviews for software packages in PyPI, preventing supply chain attacks[2][3].
Could the decision impact Python’s security or future funding?
Yes. The lost grant means delayed or canceled security upgrades, and highlights how open source foundations’ missions can clash with donor requirements, potentially impacting the stability of widely used tech[2][4].
Are other organizations facing similar pressures?
Yes. The Carpentries also withdrew from a similar grant for the same reason. This signals a wider pattern affecting scientific and tech research funding in the U.S.[2].
How did the open source and tech community react?
Overwhelming support for PSF’s decision—many developers value a commitment to DEI as essential for innovation and trust[1][2].
What happens next for open source funding and diversity?
There’s growing uncertainty. Some believe new funding sources and donor models will emerge, while others worry about more restrictive grant conditions in the future.