libexpat now funded by the City of Munich for up to 6 months
libexpat now funded by the City of Munich for up to 6 months
libexpat 现获慕尼黑市政府资助，为期最长 6 个月
For readers new to Expat: libexpat is a fast streaming XML parser. Alongside libxml2, Expat is one of the most widely used software libre XML parsers written in C, specifically C99. It is cross-platform and licensed under the MIT license. 对于刚接触 Expat 的读者：libexpat 是一个快速的流式 XML 解析器。与 libxml2 一样，Expat 是使用 C 语言（具体为 C99 标准）编写的最广泛使用的自由软件 XML 解析器之一。它具有跨平台特性，并采用 MIT 许可证授权。
Starting 2026-08-01, the “security vacation” of the project has ended and(!) I will be be paid to work on maintaining libexpat for up to 6 months thanks to the City of Munich under the umbrella of their Open Source Sabbatical program. 自 2026 年 8 月 1 日起，该项目的“安全休假”已经结束，而且！多亏了慕尼黑市政府的“开源休假”（Open Source Sabbatical）项目，我将获得报酬，进行为期最长 6 个月的 libexpat 维护工作。
What does that mean? For much of the past 10 years, working on libexpat has been competing with my regular occupation as a software engineer, chores, social life and re-creation. For the first time, I am now being employed to work on maintaining libexpat as my “regular job” for a limited period of time. 这意味着什么？在过去 10 年的大部分时间里，维护 libexpat 的工作一直与我作为软件工程师的本职工作、家务、社交生活和休闲娱乐相冲突。这是我第一次在有限的时间内，被聘用并将维护 libexpat 作为我的“全职工作”。
My top priorities will be: Fixing the currently 5 known unfixed vulnerabilities, Adding support for XML 1.0r5, Further improving the robustness and maintainability of the project. Yesterday and today most of my time went into fixing a vulnerability uncovered by Mozilla. 我的首要任务将是：修复目前已知的 5 个未修复漏洞，增加对 XML 1.0r5 的支持，并进一步提高项目的稳健性和可维护性。昨天和今天，我的大部分时间都花在修复 Mozilla 发现的一个漏洞上。
Technically, I am being employed by digitial@M now for of up 6 months with a regular working contract, including cancellation by either party, remotely from home. There is plenty to do. 从技术上讲，我现在受雇于 digitial@M，合同期最长 6 个月，这是一份正式的工作合同，包含双方均可解除合同的条款，且为远程居家办公。要做的事情还有很多。
Unvalidated AI slop submissions will still not be apprecated, but for everything else: if you want to throw intelligence at finding further vulnerabilities in libexpat and send them my way, the coming months will be the best chance at getting things fixed in reasonable time. Queueing theory and laws of physics still apply. Wish me luck! 未经核实的 AI 垃圾提交内容依然不受欢迎，但对于其他任何事情：如果你想运用智慧去发现 libexpat 中更多的漏洞并发送给我，接下来的几个月将是让问题在合理时间内得到解决的最佳时机。排队论和物理定律依然适用。祝我好运！
PS: If anyone managed to combine Clang-based MinGW with AddressSanitizer and Wine without crashing at launch, please show me how and drop me an e-mail. Thank you! Best, Sebastian 附：如果有人成功将基于 Clang 的 MinGW 与 AddressSanitizer 和 Wine 结合使用且启动时不崩溃，请告诉我方法并给我发邮件。谢谢！祝好，Sebastian