Code paid for with public money should be open to the public. This principle is enshrined in the UK Government Design Principles and the NHS Service Standard. It is now being walked back. We are signing this to restate the case.
- Published
- 1 May 2026
- Status
- Open for signatures
Signatures
74 signatures so far
Adam Worley
Adrian Duke
Has contributed to UK public-sector software
Alexander Sadler
Andrew Nesbitt
Ashley Heron
Awais Amjad
Ben Graves
Cael O'Sullivan
Cameron Brown
Chris WaitHas contributed to UK public-sector software
Daniel Roe
Dr Cory Doctorow (h.c.)
Donald Harvey
Duncan MortimerHas contributed to UK public-sector software
George David Tyson
Kunwar Grover
Hasan Mohsin
Heidar BernhardssonHas contributed to UK public-sector software
Jamie Downsworth
James Uther
Jeffery Cobblesmith
Joachim Liptrot Sand
John Reilly
Jon Atkinson
Julian Ng
Kevin MarksHas contributed to UK public-sector software
Konstantinos Kapenekakis
Kai James Patient
Robert Lee-CannHas contributed to UK public-sector software
Lee Stewart
Lenard Szolnoki
Dave LongHas contributed to UK public-sector software
Louis Escher
Louis Goddard
dr Luca cerina
Luke Kirkpatrick
Martin van IJckenHas contributed to UK public-sector software
Matthew Bristow
Mike Wagstaff
Miranda Heath
Misha GorodnitzkyHas contributed to UK public-sector software
Neil Charlton
Chris Poole
Tom Forbes
Owen JonesHas contributed to UK public-sector software
Marcus BawHas contributed to UK public-sector software
Matias Leandro Capeletto
Paul Robert LloydHas contributed to UK public-sector software
Peter YatesHas contributed to UK public-sector software
Richard Harris
Richard Dyce
Richard James Baxter
Robin WhittletonHas contributed to UK public-sector software
Rosia Evans
Sam Cook
Ștefan Ilie
Steve MesserHas contributed to UK public-sector software
Stephen Tordoff
Thomas LeeseHas contributed to UK public-sector software
Toby Dimmick
Tom BoothHas contributed to UK public-sector software
Theodor VararuHas contributed to UK public-sector software
Vad Khory
Vlad-Stefan Harbuz
Zach LeathermanHas contributed to UK public-sector software
Anonymous
× 9
Has contributed to UK public-sector software
Statement
We disagree with the NHS technical leadership’s decision to hide the source code of all of their repositories.
Making code open source requires more work than keeping it closed. That hard work is the point.
It requires a higher bar of quality. It requires processes to proactively find, fix, and monitor for vulnerabilities. It requires identifying risk, and putting barriers in place to contain any damage when things go wrong.
But it works like the human immune system: being exposed to threats hardens the attack surface.
Closed source allows that work to be skipped. It substitutes obscurity for depth, and obscurity buys you precious little when a sufficiently motivated attacker is involved.
Warning We call on NHS England to withdraw the SDLC-8 red line and reaffirm its commitment to the NHS Service Standard Principle 12: “Make new source code open.”
If you agree, sign your name using the form below. Submissions are reviewed by hand and you’ll appear on the page once approved.
References
- NHS Goes To War Against Open Source
- NHS England rushes to hide software over AI hacking fears
- NHS Service Standard — Principle 12: Make new source code open
- NHS England quietly removes open source policy web pages (Digital Health)
- Don’t be afraid to code in the open: how to do it securely (GOV.UK)
- Does Mythos mean shutting down your open source repos? (shkspr.mobi)
- Discourse is not going closed source (Discourse)