August 4, 2026
Bug fixes, but make it political
libexpat now funded by the City of Munich for up to 6 months
Munich just put an XML workhorse on payroll—and the comments turned into a Microsoft grudge match
TLDR: Munich is paying the maintainer of a little-known but widely used data-reading tool to fix security issues for up to six months. Commenters loved the public funding idea, but quickly turned the thread into a dramatic rerun of Munich’s old Linux-versus-Microsoft battle.
A tiny piece of software that quietly helps computers read piles of internet data just got a surprisingly juicy glow-up: libexpat, a widely used open-source XML parser, is now being funded by the City of Munich for up to six months. Its maintainer, Sebastian, says this means that after years of juggling bug-fixing with a day job and normal life, he can finally work on it as his actual paid job—starting with five known security problems and general cleanup. For many readers, that was the rarest kind of tech news: government money going to boring but essential digital plumbing.
But the comments? Oh, they immediately made it political. One camp basically said, “Obviously cities should fund software they depend on”, with one commenter bluntly asking, “Cities shouldn’t fund the software they rely on?” Another turned the whole thing into a Munich lore recap, dragging up the city’s old Linux-vs-Microsoft saga and claiming Munich once resisted pressure from Bill Gates and Steve Ballmer before later being lured back by Microsoft’s “siren song.” Suddenly, this wasn’t just about bug fixes—it was a sequel in a long-running civic tech soap opera.
Then came the classic internet spice: a drive-by rant about Google, WHATWG, and the death of XSLT, which is the kind of deep-cut feud that makes outsiders blink and veterans nod grimly. There was also some gallows humor, with links to old maintainer-burnout discussions and even an xkcd comic as if everyone agreed that the real joke is how much of the modern world runs on underfunded code. The mood was equal parts “finally, someone is paying for the boring important stuff” and “wow, we are still litigating Munich’s Microsoft breakup in the comments.”
Key Points
- •Starting 2026-08-01, libexpat’s maintainer says he will be paid for up to six months to work on the project through the City of Munich’s Open Source Sabbatical program.
- •libexpat is presented as a fast, cross-platform streaming XML parser written in C99 and licensed under the MIT license.
- •The maintainer says this is the first time working on libexpat maintenance as his regular job rather than alongside other employment and personal obligations.
- •Top priorities during the funded period are fixing five known unfixed vulnerabilities, adding XML 1.0r5 support, and improving robustness and maintainability.
- •The maintainer says a recent vulnerability uncovered by Mozilla has already taken most of two days to address, and that the employment is through digitial@M under a regular remote contract.