PublizoomAward notice Services
Project "Conda-Forge CVE Mapping"
- Public buyer
- Sovereign Tech Agency GmbH
Berlin - Place of performance
- Berlin
- Procedure
- Negotiated procedure without prior publication
The buyer consulted a few companies directly: it is no longer possible to take part. - Publication
- 10 September 2026
- Notice language
- English
AI analysis: go for it or not?
Summary in English, criteria, documents to provide and a GO / NO GO verdict in one minute.
Unlimited analyses during the 14-day Pro trial, no card needed.
Description
The contract concerns the project "Conda-Forge CVE Mapping" , which covers vulnerability handling and dedicated security maintenance for conda-forge, the largest package repository run by its community in the conda ecosystem. As part of five work packages, the contract covers a machine-readable record of the upstream software from which conda-forge packages are built; an openly licensed dataset of the vulnerabilities affecting those packages; the authority for conda-forge to publish its own vulnerability records; and a funded security function for the package archive and the shared systems that build and publish it. The aim of this service is to give the software supply chain of public research the capacity to identify, disclose and repair the vulnerabilities it distributes.
CPV codes
European codes that classify what the contract is about. They are how we find the tenders for your trade.
73000000
Winning prices for comparable contracts
- A quarter below
- €168,067
- Median
- €266,212
- A quarter above
- €728,856
Amounts awarded (excl. VAT) over the last 3 years for 64 contracts in the same CPV group (7300…), excluding framework agreements. Half of the contracts fall between the two quartiles. TED source: mostly contracts above the EU thresholds, so amounts tend to be high.
Similar contracts already awarded
Source : TED – Office des publications de l'Union européenne © Union européenne, données retraitées. Reference 624850-2026.