<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Jul 23, 2016, at 12:11 PM, Donald Stufft <<a href="mailto:donald@stufft.io" class="">donald@stufft.io</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div class=""><blockquote type="cite" class=""><div class="">On Jul 23, 2016, at 2:40 PM, Nicholas Chammas <<a href="mailto:nicholas.chammas@gmail.com" class="">nicholas.chammas@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">I know a more concrete proposal would have to address a lot of details (e.g. like how to split contributions across multiple maintainers), and perhaps there is no way to find the resources to build or maintain such a thing in the first place. But just for now I’d like to separate essence of idea from the practical concerns of implementing it.</span></div></blockquote></div><br class=""><div class=""><br class="webkit-block-placeholder"></div><div class="">I’m mulling over the idea in my head, but one other thing we’d need to figure out is the *legality* of doing this and if it’s something the PSF is willing to do at all.</div></div></div></blockquote></div><br class=""><div class="">This was my initial reaction as well.</div><div class=""><br class=""></div><div class="">It would be awesome if it worked! It would potentially go a long way to addressing the now much-discussed problem of funding open source infrastructure <<a href="https://medium.com/@nayafia/how-i-stumbled-upon-the-internet-s-biggest-blind-spot-b9aa23618c58#.tvr6exin9" class="">https://medium.com/@nayafia/how-i-stumbled-upon-the-internet-s-biggest-blind-spot-b9aa23618c58#.tvr6exin9</a>>. But it is also a legal and financial mine-field. Even if a lawyer says it's OK and it's possible to comply with the law, you still generate a lot of work for an accountant to actually <i class="">do</i> the complying.</div><div class=""><br class=""></div><div class=""><a href="https://gratipay.com" class="">https://gratipay.com</a> is a good, recent example of an apparently simple idea like this running into severe legal consequences and nearly imploding as a result. Another potential problem that may not be initially obvious; due to the somewhat ambiguous nature of the funding structure, they also became a popular payment processor for nazis and white supremacists, since it's hard to get paid for producing nazi propaganda on other platforms. Of course, PyPI might always be used as an update platform for malware or a C&C control point too, so it's not like there are no risks in operating it as it currently stands, but money always has the potential to make things worse.</div><div class=""><br class=""></div><div class="">I don't want to be doom-and-gloom here, in fact I would _very_ much like to see this project happen. I just think that in order to do it in a way which doesn't backfire horribly, it has to be responsibly staffed at the outset so that problems like these, that we know about, can be addressed up front, and the inevitable ones that don't seem obvious at the moment have a clearly responsible person to go fix them as they arise, in a timely way.</div><div class=""><br class=""></div><div class="">-glyph</div></body></html>