Keyv and friends compromised in active Shai-Hulud supply chain attack
Mini Shai-Hulud malware was injected into keyv and eight related npm packages on August 4, 2026 after an attacker compromised the maintainer's GitHub account
This Year in Matrix
Matrix, the open protocol for secure decentralised communications
FOSDEM 2024: my experience, some notes and tech tips
I'm sleep-deprived, completely exhausted, but incredibly excited about the whole experience. Here are my notes, impressions and a lot of pictures about FOSDEM 2024.
SerenityOS: Year 3 in Review
SerenityOS is a from-scratch desktop operating system that combines a Unix-like core with the look&feel of 1990s productivity software. It's written in modern C++ and goes all the way from kernel to web browser. The project aims to build everything in-house instead of relying on third-party libraries.
Faker.js is now a community controlled project
Generate massive amounts of fake (but reasonable) data for testing and development.
Home Assistant OS Release 8
Now using GRUB2 for UEFI-based systems, Home Assistant Yellow support, and support for UEFI-based AArch64 systems!
Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
Arti 1.0.0 is released and ready for download.
20×10%
Hi! It feels like I did one of these posts just the other day, but it was a month ago? Time sure does fly… Since there’s a round number in the title of this blog post, perhaps I should …
Blender 3.6 LTS Released
Blender Foundation and the online developers community proudly present Blender 3.6 LTS!
KeePassXC 2.6.0 Released
KeePassXC Password Manager
OpenBSD on the Lenovo ThinkPad X1 Nano
Lenovo has finally made a smaller version of its X1 Carbon , something I've been looking forward to for years.
Gleam Is Now on Tangled
⭐️ A friendly language for building type-safe, scalable systems!
Librem 14 begins shipping
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
GitHub and the crime against software
An investigation into collapse of Github and how the decay of our tech infrastructure is a crime against software. Detailed comparisons of Github, Gitlab, Codeberg, and more from a distributed systems and software performance expert.
Valkey Turns One: Community fork of Redis
Valkey is not only thriving, but now outperforming Redis 8.0 in real world benchmarks.
PortableApps.com Hits 1 Billion App Downloads
PortableApps.com has hit the 1 billion portable apps downloaded milestone. That's 1,000,000,000 portable apps served to millions of users in dozens of languages all over the world. All of the 1 billion portable apps served from PortableApps.com were freeware or open source software which run on our open source, free…
Krita 5.2
Krita is a professional FREE and open source painting program. It is made by artists that want to see affordable art tools for everyone.
F-Droid Awarded Open Technology Fund's FOSS Sustainability Grant
We are excited to announce that F-Droid has been awarded $396,044 from the Open Technology Fund’s FOSS Sustainability Fund. This grant is specifically design...
Transparent telemetry for open-source projects
How do software developers understand which parts of their software are being used and whether they are performing as expected? The modern answer is telemetry , which means software sending data to answer those questions back to a collection server. This post is about why I believe telemetry is important for…
I don't want your PRs anymore
Notes by `dpc`
Mitro Releases a New Free and Open Source Password Manager
Good security practices require us to use different passwords for most or all of the websites and services we interact with. For accounts of any significance, those also need to be strong passwords of one form or another. But if you combine those two requirements (one password per site, most or all...
Is NixOS truly reproducible?
Build reproducibility is often considered as a de facto feature provided by functional package managers like Nix. Although the functional package manager model...
PINE64 December Update
Welcome to the last community update of the year. I want to start this month’s update by thanking everyone who helped us make this challenging year a fruitful and successful one. A special thanks goes to the core community team - our mods and admins - who keep the cogs spinning on a daily basis. Marek (gamiee) and…
CocoaPods trunk read-only plan
The blog for CocoaPods.org the Cocoa Dependency Manager
Companies that make money by distributing misleading versions of VLC
Some thoughts about the people who use the name of VLC media player to spread adware/spyware while infringing the VideoLAN ‘s intellectual property and brand…