This also struck me as a bit odd.. even more so when you consider that over recent years, eclipse's general usage over time has decreased

Are OpenSFF members using Eclipse sub-projects in the financial services industry? In automotive/embedded, Eclipse hosts the safety-certified OSS ThreadX RTOS (formerly Azure RTOS), which runs on 10B+ devices, https://finance.yahoo.com/news/eclipse-foundation-showcases-...

Ahhh, I was thinking they were just funding the IDE.

It would be helpful for projects funded by OpenSSF Omega to publish details on how they prioritized use of the funds to improve supply chain security within each project.

Tons of modern and really critical development happens on Eclipse-based environments. Two examples I can think of off the top of my head are

- DBeaver (very widely used to connect to production databases)

- STM32Cube IDE (for embedded development in all sorts of devices)

TI's Code Composer Studio is also eclipse based.

Eclipse manages a distribution of Java and the Jakarta libraries, formerly known as JavaEE/J2EE. Arguably Jakarta is a larger footprint, since pretty much every enterprise-like library or application derives functionality from it.

NSA's got to keep developing Ghidra

I expect the pay awards are based on the various OSS foundation thingies lobbying.

But protecting dev environments makes sense. Think how many supply chains an attacker can compromise if they can get at random dumb developer machines...