Open Source

Nearly two years after the xz Utils backdoor shocked the open source world, the supply chain security landscape has changed — but not enough.

OpenTofu has matured significantly since its fork from Terraform. Here’s where things stand and what it means for teams managing cloud infrastructure.

Rust’s integration into the Linux kernel has moved beyond proof of concept into real subsystems, but the cultural and technical challenges remain fascinating.

A supply chain attack on the popular Ultralytics YOLO package highlights the persistent vulnerability of the Python ecosystem’s distribution pipeline.

OpenTelemetry’s logging API and SDK reaching general availability completes the observability trifecta. Here’s why this matters more than you might think.

Broadcom’s deletion of Bitnami images from Docker Hub is a wake-up call about depending on container registries you don’t control.

The uv package manager experimentally adds code formatting, continuing its ambitious push to become a single tool for the entire Python development workflow.

Google releases Gemma 3 at 270M parameters, proving that smaller, more efficient models might matter more than the next big model launch.

A year and a half after forking from Terraform, OpenTofu is proving that community-driven infrastructure tooling can thrive — but challenges remain.

Anthropic’s Model Context Protocol is gaining traction as a universal standard for connecting AI models to tools and data sources, and the implications for the developer ecosystem are worth watching.

Go 1.24 brings generic type aliases, improved tool management, and Swiss Tables. A look at how Go keeps evolving without losing its identity.

DeepSeek’s R1 reasoning model, released as fully open-source with an MIT license, demonstrates that frontier AI capabilities aren’t exclusive to US labs anymore.