> ## Content Index
> Fetch the complete content index at: https://itsfoss.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# LVFS Has Turned Up the Heat on Vendors Who Won't Contribute
- URL: https://itsfoss.com/news/lvfs-consumption-quota/
- Published: 2026-04-28T17:43:08.000Z
- Updated: 2026-04-28T17:43:08.000Z
- Description: Announced last year, the first wave of LVFS restrictions went live at the start of this month.
- Author: Sourav Rudra
- Tags: News

The Linux Vendor Firmware Service, or [LVFS](https://fwupd.org/?ref=itsfoss.com), is what makes firmware updates on Linux *not a nightmare*. Hardware vendors upload their [firmware](https://en.wikipedia.org/wiki/Firmware?ref=itsfoss.com) directly to it, and users get those updates delivered through [fwupd](https://github.com/fwupd/fwupd?ref=itsfoss.com) and tools like [GNOME Software](https://apps.gnome.org/Software/?ref=itsfoss.com).

According to official estimates, **the project has shipped over 140 million updates from 150 vendors** and is a requirement for most consumer-facing [Original Equipment Manufacturers](https://en.wikipedia.org/wiki/Original%5Fequipment%5Fmanufacturer?ref=itsfoss.com) (OEMs), [Original Design Manufacturers](https://en.wikipedia.org/wiki/Original%5Fdesign%5Fmanufacturer?ref=itsfoss.com) (ODMs), and [Independent BIOS Vendors](https://support.lenovo.com/in/en/product%5Fsecurity/ps500065?ref=itsfoss.com#:~:text=Independent%20BIOS%20vendors%20%28IBVs%29%20are%20software%20development%20firms%20that%20specialize%20in%20developing%20the%20customized%20BIOS%20firmware%20that%20is%20loaded%20into%20the%20PCs%20of%20original%20equipment%20manufacturers) (IBVs).

But the project is moving towards a dilemma that most open source projects of its scale eventually face. To be a sustainable undertaking in the long term. 🗓📈

## They need support 

![this is an image of the lvfs dashboard with demo uploaded firmware data visible](https://itsfoss.com/content/images/2026/04/lvfs-dashboard.png)

**Just a placeholder image of the LVFS dashboard.*

Right now, the [Linux Foundation](https://www.linuxfoundation.org/?ref=itsfoss.com) covers all of LVFS' hosting costs, and [Red Hat](https://www.redhat.com/en?ref=itsfoss.com) funds [Richard Hughes](https://hughsie.com/?ref=itsfoss.com), the project's only full-time developer. Richard, along with a bunch of part-time contributors, **keep over 20,000 firmware files in circulation**.

Their sustainability plan flags **some key issues** that come with being this understaffed.

The project has no dedicated security response team, its sole maintainer has no backup, and the volume of critical work keeps growing with no one new stepping in to help.

**Security vulnerabilities get handled on a best-effort basis** (*yikes* ☠️), and very few companies are supporting fwupd core or the LVFS web service. You could call it [a tragedy of the commons](https://en.wikipedia.org/wiki/Tragedy%5Fof%5Fthe%5Fcommons?ref=itsfoss.com) where everyone depends on it, but almost no one is paying for it.

The plan was published in [August 2025](https://blogs.gnome.org/hughsie/2025/08/08/lvfs-sustainability-plan/?ref=itsfoss.com), and LVFS has been **rolling out restrictions in phases** since then. April 2025 already brought in fair-use download utilization graphs to vendor pages. Fair use upload tracking came in July, and sponsorship tiers opened up in August 2025.

The April 2026 phase kicked in at the start of this month and has been live for nearly four weeks now. Any firmware page where a vendor is crossing 50,000 monthly downloads now shows an *overquota* warning.

![a tiny screenshot that showcases lvfs' new overquota warning](https://itsfoss.com/content/images/2026/04/lvfs-overquota-warning.png)

**Courtesy of Richard Hughes.*

Vendors below the "*Startup*" sponsorship level have also lost access to detailed per-firmware analytics. In August, custom LVFS API access will be cut for non-Startup vendors, with automated upload limits following in December.

## How can you help?

![a table that shows the premier, startup, and associate sponsorship tiers for the lvfs project](https://itsfoss.com/content/images/2026/04/lvfs-sponsorship-tiers.png)

LVFS is looking for vendors who use its infrastructure to pitch in. Presently, **only two hold *Startup* sponsor status**: [Framework Computer](https://frame.work/?ref=itsfoss.com) and the [Open Source Firmware Foundation](https://opensourcefirmware.foundation/?ref=itsfoss.com).

What they actually need is either two full-time software engineers or **$400,000** to fund the hires through the Linux Foundation, plus a separate **$30,000** for hosting. The sponsorship tiers are as follows:

- **Premier:** $100,000 per year
- **Startup:** $10,000 per year (*under 99 employees*)
- **Associate:** Free, but only available to registered non-profits, academic institutions, and government entities.

Both *Premier* and *Startup* tiers require an [LF Silver Membership](https://www.linuxfoundation.org/hubfs/lf%5Fmem%5Fbenefits%5F0010625.pdf?ref=itsfoss.com) (*page 28*) on top of the listed fees. There is **no free option for commercial hardware vendors**. Alternatively, vendors can contribute a full-time engineer to work on LVFS or fwupd directly.

---

**Suggested Read 📖:** [*Will You Pay $119 For An Open Source KVM?*](https://itsfoss.com/news/leafkvm-crowdfunding/)

[Will You Pay $119 For This Open Source KVM Built on Rust and Buildroot?The LeafKVM packs a 2.4-inch touchscreen, Wi-Fi 5, and PoE into a CNC aluminum box.![](https://itsfoss.com/content/images/icon/android-chrome-512x512-388.png)It's FOSSSourav Rudra![](https://itsfoss.com/content/images/thumbnail/leafkvm-banner.png)](https://itsfoss.com/news/leafkvm-crowdfunding/)