Open Source

The Linux Foundation’s new Alpha-Omega Project, backed by Google and Microsoft, aims to systematically improve the security of critical open source software.

The White House convened tech leaders to address open source security after Log4Shell. Here’s what was discussed and what it means for developers.

A single developer deliberately corrupted two widely-used npm packages, exposing the fragility of the open source supply chain.

A critical remote code execution vulnerability in Apache Log4j has sent the entire industry scrambling. Here’s what you need to know and do right now.

CentOS Stream 9 has arrived as the successor to both CentOS 8 and the traditional CentOS model — and the enterprise Linux community is still adapting.

Popular npm packages coa and rc were hijacked to distribute malware, impacting thousands of projects and raising urgent questions about supply chain security.

The popular ua-parser-js npm package was hijacked to deliver cryptominers and credential stealers, affecting millions of weekly downloads.

GitLab’s successful IPO this week validates the open-core model and raises important questions about the future of open-source developer tooling.

GitHub Copilot’s AI-powered code suggestions have sparked a fierce debate about open source licensing, training data consent, and the future of code ownership.

DeepMind releases 350,000 protein structure predictions as an open database — a rare moment where AI genuinely accelerates scientific progress.

With ArgoCD accepted into CNCF incubation and Flux reaching its own milestones, GitOps is transitioning from buzzword to standard practice for Kubernetes

Attackers pushed malicious commits to PHP’s official Git repository, exposing the fragile trust model behind open-source supply chains.