Open Source at Scale Needs More Than Code
Spotify has relied on open source since its earliest days, and the broader industry has followed the same trajectory: nearly every company, not just tech firms, now depends on open source libraries, frameworks, or infrastructure. But as adoption has grown, the ecosystem supporting that software has not kept pace. Maintainers — often unpaid and sometimes working alone — are facing burnout while producing work that millions rely on. Spotify argues that companies benefiting from this ecosystem have a responsibility to help sustain it, and has rolled out several initiatives aimed at doing exactly that.
Backstage Reaches Incubating Status
Backstage, Spotify's developer portal platform, has been promoted by the Cloud Native Computing Foundation (CNCF) to an incubating project — a signal of both technical maturity and growing community adoption. In the two years since its release, Backstage has grown into its own ecosystem, with over 100 adopters including Netflix, American Airlines, Brex, and Zalando, plus a steadily expanding plugin marketplace.
Commercial activity around Backstage is also emerging. Companies like Roadie and Frontside now offer services within the ecosystem, and Spotify plans to launch paid plugins later this year. Those plugins will package Spotify's own developer-experience insights, but they also open a new avenue for community members to earn income from their open source contributions, expanding the marketplace in a way that supports financial sustainability for developers.
An Official Home for Open Source at Spotify
To formalize these efforts, Spotify has established an open source program office (OSPO) within its Platform Strategy team, led by Open Source Tech Lead Per Ploug. The OSPO will oversee all open source processes, including how projects are released, ensuring developers have proper support when sharing tools, research, and experiments with the wider world.
Direct Financial Support for Independent Maintainers
One of the OSPO's first initiatives is the Spotify FOSS Fund, which provides direct payments to maintainers of free and open source projects. The target: projects that many large companies depend on but that are maintained by a handful of unpaid developers — or, as a popular xkcd comic illustrates, sometimes just one individual. Nominations for eligible projects come from Spotify's internal developer community, the engineers who use these projects daily. The final list of recipients is expected to be announced soon.
Industry-Wide Security Collaboration
Open source security is a problem that scales beyond any single company. Spotify has joined the Open Source Security Foundation (OpenSSF), a cross-industry organization hosted by the Linux Foundation that focuses on open source security initiatives. The move follows Spotify's earlier partnerships in the CNCF and its role as co-founder of the Mobile Native Foundation, reflecting a pattern of working with other companies to address systemic challenges rather than attempting isolated fixes.
The Responsibility of Scale
Why is Spotify making these investments now? The company's answer is straightforward: its scale means it both depends on and benefits from open source more than most, and it has the resources to make a difference. Rather than asking "Why us?", Spotify frames the question as "Why not everyone?" The initiatives described — supporting maintainers, formalizing open source governance, pursuing industry-wide security partnerships — are all available for other companies to adopt or improve upon. As with open source itself, the ideas are free and get better when more people build on them.
