End-of-life open source shouldn’t come with a meter running. As AI-accelerated vulnerability discovery turns up more flaws in libraries past end of support, backpatch vendors charge by the patch and by the library, and the bill grows with every CVE.
Backpatch Alliance takes a different approach. Membership covers every backpatch, current and future, with no per-patch or per-library fees. And you can read every fix before you pay for it: each one lives in a public branch on GitHub, with upstream provenance and, where the original maintainer participates, their signature on the commit.
