But the way that many open source projects work today is by supplying a core that is FOSS and then additional add-in modules that they charge for.
Nowhere is this more obvious with FreePBX than the endpoint manager. There is the OSS Endpoint Manager and there’s been at least 4 forks and efforts of that, in fact I discussed that and posted instructions for it almost 2 years ago here:
OSS Endpoint Manager keeps crashing - FreePBX / Applications / Modules - FreePBX Community Forums
The problem with this, of course, is that one of the revenue streams supporting FreePBX is the sale of Sangoma telephones. EPM is not FOSS because the FreePBX maintainers/sponsors basically say you can do your phone provisioning 1 of 4 ways - 1 is pay us for our phones and use EPM for free, 2 is pay us for EPM and use cheap phones you get elsewhere that may or may not match the models in EPM, 3 is write and maintain your own provisioner (OSSEPM) or 4 is do your provisioning outside of FreePBX. (tftp+text editor)
1 & 2 are “easier” and “supported” but cost money, 3 & 4 are “harder” and “unsupported” but are free.
I can almost guarantee those many would read my OSSEM posting, see that “oh boy this is going to take a few hours to digest” and then pay the money for EPM. And what is wrong with that?
The whole point of FOSS is you can have it either served to you on a silver platter and you pay for that, or you can haul your own water from the well for free.
The Open Source part of FreePBX works fine. If you do as I did and put time into learning about Asterisk and learning about FreePBX and experimenting and testing and so on, you can produce a phone system that costs nothing other than the cost of your time, that works well and that people can use on a daily basis. There isn’t any key critical piece of FreePBX that is behind a paywall that prevents you from creating a working phone system. Even EPM - I don’t use OSSEPM myself, I only set it up just to see how difficult it would be to do - I use tftp and a text editor - the fact that an “uncommercial” install of FreePBX does not include EPM; is not a barrier to making a PBX from it.
I learned about the Retail Triangle 45 years ago as a teenager. If you want top quality, on demand, you are going to pay top dollar. I have taught both of my kids that people only pay you for doing something that they don’t want to do or doing something they can’t do. The vast majority of people don’t want to spend time learning; the vast majority of IT people can’t build a PBX from Open Source. Companies like Sangoma exist to make money from the vast majority of people who don’t want to spend time learning about phone systems, and because they don’t want to spend the time learning, they can’t set them up. But they can pick up the phone and throw money (that they don’t own usually) to Sangoma who can serve it up to them on a silver platter. I do NOT begruge Sangoma or any other FOSS project (such as fspbx) for this because those people who don’t want to learn, are essentially paying for my toys.
When FOSS projects lose sight of this, and they start spending more and more of their development time on the glitz, and not the core, then what you have happen is EXACTLY what just happened not more than 4 days ago with CVE-2026-31431 aka Copy Fail. Seriously, do you know just how many different Linux distros there are out there that merely skin either Slack or Debian or RedHat? Think of the enormous amount of developer time that has been sunk into nothing more than fluff - interface code - producing all those distros. And in the meantime while all those smart dedicated people with the light of religion in their eyes who just KNEW that they had a “better” skin than the other guy were hacking away on fluffy interface code producing distro after distro - that copy fail bug was latent with no attention on it from any of those smart people. Until xinit came along and published it.
Makes me wonder how long the NSA and China PRC have known about copy fail and how long they have been exploiting it to fry people and blow up stuff.
I think Sangoma is right where they are supposed to be - focused on the core. FreePBX works. They put a TON of work into moving it off RedHat/Centos to Debian. They COULD have just punted it from CentOS over to Rocky Linux (another red hat derivative) with less work. But putting it on Debian makes it easy as pie to deploy on Ubuntu which is the single largest Linux distro. If people want more FOSS modules for FreePBX nothing is stopping them from writing them - just like OSSEPM.
The question shouldn’t be why isn’t Sangoma releasing more FOSS modules for FreePBX. The question should be why aren’t ClearlyIP, and CrossTalk Solutions, and other commercial entities releasing more FOSS modules for FreePBX.