tl;dr: The maintainer of libexpat (a widely-used C XML parser) has been hired by the City of Munich for up to 6 months under their Open Source Sabbatical program, marking the first time he can work on the project as a full-time job rather than a side effort. Priorities include fixing 5 known unpatched vulnerabilities, adding XML 1.0r5 support, and improving project robustness. He's inviting serious (non-AI-generated) vulnerability reports during this window.