331
Shopify, pulling strings at Ruby Central, forces Bundler and RubyGems takeover
Ruby Central recently took over a collection of open source projects from their maintainers without their consent.
New
The latest blog posts to take off on Hacker News. 3,681 posts.
332
Cloudflare is sponsoring Ladybird and Omarchy
We're excited to announce our support of two independent, open source projects: Ladybird, an ambitious project to build a completely independent browser from the ground up, and Omarchy, an opinionated Arch Linux setup for developers.
333
A board member's perspective of the RubyGems controversy
What a week it's been as a Ruby Central Board Member.
334
KDE is now my favorite desktop
From my last blog post , I am now using KDE as the desktop environment for my gaming rig. The reason is because I want a reasonably easy to use Linux desktop for when my wife needs to use the PC for something other than gaming, and this was the reason why my "traditional" Sway setup was a no-go.
335
Pnpm has a new setting to stave off supply chain attacks
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly...
336
337
338
An open-source maintainer's guide to saying “no”
Stewardship in the age of cheap code
339
340
Reshaped is now open source
After five years of closed-source, Reshaped is finally open for all – both in React and Figma.
341
PgEdge Goes Open Source
pgEdge is now fully open-source under the Postgres license. What that means for distributed PostgreSQL, the Spock extension, and our enterprise customers.
342
Open Source SDR Ham Transceiver Prototype
The future is here: LinHT booted up successfully for the first time. We believe that Software Defined Transceivers will be the next big trend in amateur radio.
343
NPM debug and chalk packages compromised
The popular packages debug and chalk on npm have been compromised with malicious code
344
Zig Software Foundation 2025 Financial Report and Fundraiser
Zig Software Foundation is a 501(c)(3) non-profit organization which I am proud to say makes extremely efficient use of monetary resources . Unlike many of our peers, our primary expense is direct payments to contributors for their enhancements to the Zig project.
345
What's New with Firefox 142
Take your stand against an industry that’s selling your data to third parties. Stay smart and safe online with technology that fights for you.
346
Bear is now source-available
Updates to the Bear license
347
CocoaPods trunk read-only plan
The blog for CocoaPods.org the Cocoa Dependency Manager
348
Open Source is one person
The Register recently published a story titled Putin on the code: DoD reportedly relies on utility written by Russian dev. They should be ashamed of this story. This poor open source developer is getting beat up now to score some internet points. It’s very upsetting. But anyway, let’s look at some receipts. If you’re…
349
How RubyGems.org protects OSS infrastructure
Recently, Socket.dev published research highlighting malicious gems designed to steal social media credentials. We wanted to use this as an opportunity to share more about how RubyGems.org security...
350
Ghrc.io appears to be malicious
A simple typo of ghcr.io to ghrc.io would normally be a small goof. You’d typically get a 404 or similar error, finally work out the issue, fix it, and move along. But in this case, that typo appears to be doing something very malicious, stealing GitHub credentials. What’s ghcr.io? First, a quick bit of background…
351
Thunderbird Pro August 2025 Update
Our team is hard at work on Thunderbird Pro. Get the latest developments on Thundermail, Appointment, and Send in our latest update.
352
OPA maintainers and Styra employees hired by Apple
Banner announcing OPA creators joining Apple
353
An IRC-Enabled Lawn Mower (2021)
IRC stands for Internet Relay Chat . Invented in the late 1980s, it's one of the oldest and most popular realtime chat protocols. Despite being over 30 years old, it's still actively developed, and hundreds of thousands of people still use it to chat every day.
354
Jujutsu and Radicle
Sovereign code infrastructure.
355
Funding Open Source like public infrastructure
To protect the digital foundation of essential government services, governments should invest in Open Source as public infrastructure and shift from consumption to contribution.
356
357
Progress towards universal Copy/Paste shortcuts on Linux
On Linux, Control-C and Control-V don't work for copying and pasting in terminals. The Control modifier is used for its original purpose of inserting control codes. Instead, terminal apps require an extra Shift modifier, like Control+Shift+C. But what if there were hidden shortcut combos for
358
Radicle 1.3.0
Sovereign code infrastructure.
359
Debian 13 “Trixie”
After 2 years, 1 month, and 30 days of development, the Debian project is proud to present its new stable version 13 (code name trixie ).
360
Open SWE: An open-source asynchronous coding agent
Open SWE is an open-source, cloud-hosted coding agent that autonomously handles GitHub tasks—planning, coding, testing, and opening PRs.