2026-07-16 09:25:26
How mature is this repository? My long quest for open-source software metrics
When I discover an open-source software project for the first time, how can I estimate whether it is mature, healthy and usable?
I just released OSSTRL - Open Source Software Technology Readiness Level to help me calculating the maturity of open-source projects.
#opensource
11 core #OpenSource packages run on one or two maintainers, e.g. zlib, sudo, bash, and the time-zone database.
#OpenSSL #OpenSSLCon26
And for questions along the way, the Grist Discord has a dedicated self-hosting channel. https://www.getgrist.com/blog/how-do-i-self-host-grist-recap-of-our-setup-wizard-webinar/
#Google hammers another, extremely petty nail in the #Android #OpenSource Project’s coffin
Kajal Sapkota on "Who pays for #OpenSource": the year before Heartbleed, #OpenSSL received $2,000 in donations.
"For reference, that's what I pay in rent each month"
#OpenSSLCon26
"The question was never whether #OpenSource code is free. It is who pays the reviewers" -- Kajal Sapkota from #OpenSSL Corporation
#OpenSSLCon26
Ausgerechnet Alibaba-Chef Joe Tsai rät Europa zu offener KI auf Basis Open Source. „Die amerikanischen Closed-Source-Labore schreiben keine Papers mehr, weil sie nichts teilen wollen.“ Europa redet derweil viel über KI und hat laut Mistral-Chef Arthur Mensch noch zwei Jahre, um auch eigene zu bauen. Marcel Kunzmann bei Telepolis #KI #OpenSource #Europa https://www.telepolis.de/article/Alibaba-Chef-Europas-Weg-zur-KI-Unabhaengigkeit-fuehrt-ueber-Open-Source-11485813.html?xing_share=news
🔐 Hermes Vault: a local-first credential broker and encrypted vault for AI agents. It scans for plaintext secrets, brokers policy-gated access and proves audit integrity.
#opensource #security #MCP
Pebble Time 2 – #opensource
humanizer
"A 12B model that rewrites AI-written drafts (emails, essays, reports, forum posts; English and Chinese) so they read like a person wrote them. It is trained to keep every number, unit, date, name and quote and to add nothing, and it runs locally."
#ai #opensource
This a great page to view regularly, it shows the most used models on Openrouter, an AI model provider. Tokens, spend, etc, all in graphs. Opensource/openweights and chinese models are gaining ground.
#AI #openrouter #rankings
#OpenSource as We Know It Is Dead
https://jross.me/open-source-as-we-know-it-is-dead/
🧰 #ECC is an #opensource agent harness optimization system that adds skills, instincts, memory, security and research-first development to #ClaudeCode,
Starting in 2027, a silent update, nonconsensually pushed by Google, will block every Android app whose developer hasn't registered with Google, signed their contract, paid up, and handed over government ID.
https://keepandroidopen.org/
So after the latest redesign even #opensource / #linux company #SUSE has a blog without an #RSS fe…
Was ich noch sehr vermisse: eine Alternative zum Speichern, Kategorisieren, Bewerten und Beschreiben von Orten wie mit #GoogleMaps. Etwas #MadeInEurope und #OpenSource.
A tip (unsolicited): if you want to make your Hyprland look stunning use these truly opensource configs. Stephan Raabe has been at it for 3 or 4 years now and he deserves the real credits (and JaKoolit, but he stopped). Highly recommended!
https://ml4w.com/os/
The "crunch" on AI use is starting, it was amazing how quickly i reached my limit in my Gemini Pro account using Gemini 4 Argon (amazing model byt the way). Bigtech has to quickly increase prices/turnover to survive i guess. Companies/organisations are also struggling with the costs. I think opensource/openweights models will become even more popular, although their use is also not for free (infrastructure).
#AI #Gemini4 #costs
I don’t like playing the futurologist, but after seeing AI companies warn EU institutions about the supposed risks of open-weight models, I suspect some are lobbying to regain control over genuine open source and open-weight AI.
Don’t fall into the trap: the greater danger lies in opaque, proprietary models, not open-source ones.
#opensource
Die Schweiz nennt ihr Anti-Microsoft-Programm BOSS – und trifft damit unfreiwillig den Nagel auf den Kopf: Wer entscheidet, wo die eigenen Daten liegen, ist eben der Chef im Ring. 3000 Beschäftigte, openDesk, Rollout bis Ende 2027. Der US-CLOUD-Act als bester Verkäufer von Open Source, den man sich vorstellen kann. #DigitaleSouveränität #OpenSource #Schweiz https://www.heise.de/news/Schweiz-startet-Open-Source-Arbeitsplatz-fuer-3000-Beschaeftigte-11444842.html?wt_mc=rss.red.unbekannt.unbekannt.atom.beitrag.beitrag
Distributionsfremde Software – #opensource
📋 The PHP Foundation looks at how European public administrations run their #digitalsovereignty strategies on #PHP applications #opensource
Soll ich wieder einen Vortrag zum #Linuxday einreichen? #OpenSource #ERP Systeme wäre vielleicht für Unternehmen interessant und mit
The urge to use opensource projects where maintainers have similar worldview to yours is kinda unpleasant, when you tend to always have your own opinion.
One would ask, if it isn't like that with everything then. Um, I don't know? Worldviews seem to be exposed more aggressively here, than around other things, at least by some folks.
#randomthoughts
How do I self-host Grist? Recap of our setup wizard webinar #OpenSource
Too many days working on #FLOSS feel like: "I'm not paid for this shit. I'm paid to do other shit and I have to focus on that shit, but I can't when I have to spend so much time fixing shit that apparently others are being paid to break all the time."
#Gentoo #LLVM #FreeSoftware #OpenSource
#OpenSource - Who holds control?
via Peter Zaitsev on LinkedIn https://www.linkedin.com/posts/peterzaitsev_i-was-asked-how-do-…
We had an intermittent storage issue. This problem has now been resolved.
#opencommit #git #opensource
Wieder was gelernt. Aber wer kommt auf die Idee, sowas hinter «OLE-Objekt» zu verstecken?
https://social.tchncs.de/@LibreOfficeDE/116956696624264273
"General Resolution: LLM usage in Debian"
When people don’t understand a system, they try to regulate it.
#ai #debian #opensource
Updating Grist means pulling a new Docker image and restarting the container. https://www.getgrist.com/blog/how-do-i-self-host-grist-recap-of-our-setup-wizard-webinar/
#VLC4 a enfin une date de sortie officielle pour décembre 2026. Je viens de voir ^^ #VLC #OpenSource #FOSS
J'…
That's a nice little utility, also available as a #launchbar action
#markdown #html #opensource
@dawid@social.craftknight.comGuest poster Stefano Fago on a Java Geek today:
"I started with a simple task: I needed an #AI agent to help me compile decision records, structured documents that capture why a team chose option A over B, using the #opensource
🤖 #BrowserAct is an open-source browser automation CLI built for #AIagents — real browsers, anti-bot bypass and human handoff when the agent gets stuck #opensource
Self-managed Grist supports SAML and OIDC, so your team can log in with your existing identity provider. https://www.getgrist.com/blog/how-do-i-self-host-grist-recap-of-our-setup-wizard-webinar/
Is there somewhere a good open source software in Python to act as bridge between RSS and ActivityPub act as actor? Before I write something new.
#activitypub #opensource #rss
Find and Help your Open Source Friends
- Leonid Bugaev
"So let the large projects close the queue [to LLM contributions]. There is a lot more open source out there.
That was the reason I built Help Wanted in the first place, few years ago. At the time of writing, it has 650,456 issues from 96,576 projects in its index, from the projects who actually WANT help. Most developers will never hear the names of nearly all these projects.”
#OpenSource
Heute bin ich am #SGES in #Winterthur als Redner im Innovationsforum IF.19 zum Thema Digitalisierung und Resilienz: Wie schaffen wir zukunftsfähige Infrastrukturen?
Natürlich dreht sich mein Beitrag um die Rolle von #OpenSource
https://sges.ch/if2026/if19-2026/
Würde mich freuen hier auf andere Fedinaut*innen zu treffen.
📋 #queuesql is an #opensource #Laravel package that turns any write query — delete, update, insert, upsert — into parallel batched queue jobs
📦 v2 is a ground-up rewrite in Rust of the original Go tool, MIT licensed. Windows support is planned
🌐 #opensource
Pivotick v2.0.0 has been released.
Pull more graph out of wherever your data lives, and you choose what lands. History is the way back out of anything that does.
Actually you can update, pivot graph and review. This release also includes many new other features.
#graph #library #infosec #opensource #graphing #pivotick #cti #threatintelligence
RE: https://social.overheid.nl/@opensource/117309135841847497
Een toot om in te lijsten (helaas). 😇
Maar het zou inderdaad mooi zijn als bij al die mooie woorden in de praktijk wat laaghangende resultaten geboekt worden.
Berichten delen (doorplaatsen) op Mastodon is geen hoogstaande wiskunde.
🧠 #VoiceMem is an #opensource memory system for real-time #voiceagents, built on a streaming dual-brain architecture
📋 #HuntProxy is an #opensource web security workbench built for #AI agents — connect it over #MCP
ok, there's potentially value in a webapp having access to a deterministic, promptable "anything" classifier that runs locally. if you know which anything-classifiers are available, you can validate a prompt for your use case, and shipping a prompt to the browser is probably cheaper than shipping your own classifier
this definitely feels more interesting than local LLMs, but it's not a trillion dollar industry. it's "browsers ship an api for Ann's opensource ocr and pose detector, cool"
🔁 #CompoundEngineering is an #opensource plugin of 33 skills for AI coding agents that turns each task into stored knowledge, so the next unit of work gets easier instead of harder #ClaudeCode
#OpenProductivity: 6 #OpenSource -Hersteller gründen Joint Venture für #openDesk
> Die #openDesk -Komponentenhersteller @… @… #Nordeck #OpenXchange @… und @… haben die Open Productivity Software GmbH gegründet. Das Joint Venture will die Office- und Kollaborationssuite openDesk bei #Unternehmen und Betreibern kritischer Infrastrukturen in internationalen Märkten etablieren.
13. Oktober 2026:
#Kritis #OSS #DigitaleSouveranitat
📋 #Luvus is an #opensource mission control for your #AI coding agents — one terminal to run, watch, resume and orchestrate
Mooi om te zien hoeveel keuze en variatie er is als het gaat om een meer autonome digitale werkplek.
#opensource #foss #mijnbureau
🔍 #REA (Reverse Engineer Anything) is an #opensource #MCP server that lets #AIagents inspect app…
The SaaSpocalypse might be back on. A developer has used AI to create an alternative to the Adobe Suite and in doing so has put the entire cloud model, with it's hard-to-exit ecosystems, back under scrutiny.
#saaspocalypse #adobe #opensource #technews #ArtCraft
🎨 #Impeccable is a design language for #AI coding agents: 1 skill, 23 commands, live browser iteration and 46 deterministic detector rules for AI-generated frontend design #opensource
So finally Kimi-k3 is not really open-source
#kimi #ai #opensource
🐝 #SwarmForge is an #opensource agent coordination system that turns swarms of #AI agents into a disciplined engineering team, built on
All data stays local when self-hosting, including anything processed through the REST API or MCP. https://www.getgrist.com/blog/how-do-i-self-host-grist-recap-of-our-setup-wizard-webinar/
📋 #Autoprompt is an #opensource coding-agent skill that cut failures by 45% on agentic coding tasks #aiagents
Kiel macht ernst: Über 200 Beschäftigte der Staatskanzlei arbeiten laut Stefan Krempl bei @… mit Linux. Rund 20 Rechner bleiben vorerst bei Windows – Fachverfahren ohne Alternative. Genau da liegt die eigentliche Baustelle der digitalen Souveränität. Nächste Schritte: Nextcloud, Univention Nubus, Oskar. #Linux #OpenSource #DigitaleSouveränität https://www.heise.de/news/Nachfolger-von-Windows-Staatskanzlei-Kiel-stellt-auf-Linux-um-11460729.html
📋 #FreeToken is an edge-native #MoE serving engine for running frontier-scale open-weight models on personal, consumer hardware #opensource
Looking at and playIng around with Hermes Agent, impressive and relatively easy to install and use.
Also opensource. Hermes Agent — Open-Source AI Agent That Grows With You | Nous Research #AI #HermesAgent #opensource #foss #agents
Stop saying “open source sustainability” #business
📋 #croc is a CLI tool that transfers files and folders between any two computers, with end-to-end encryption #opensource #golang
Key Takeaways: OSOR Webinar on EU Open Source Strategy.
#opensource #foss #EU
🔌 #Toolport is a local-first #MCP gateway. Every AI client points at one port and shares the same servers, so you set up and authenticate each server once instead of in every app.
#opensource
If you are curious about (nearly) everything we did the past months at the GCVE.eu initiative:
#gcve #cve #vulnerability #vulnerabilitymanagement #cra #cybersecurity #openstandard #opensource
🧩 #Laravel LSP announced at #LaraconUS 2026: a first-party language server that teaches your editor about your app #PHP
📊 Local-first dashboard for #Codex CLI and #ClaudeCode usage limits #opensource #nodejs
I love to see clever use of the @… ecosystem and @… did a cool GNA which is automatically creating GCVE records and structured security advisories from full-disclosure mailing-list or alike:
🔗 Project details #gcve #cve #vulnerability #vulnerability #opensource #cybersecurity
📺 youtube-subscriptions-ingest pulls video metadata from your real #YouTube subscriptions and turns it into a cross-linked knowledge graph in your #Obsidian second brain, not just a flat list of videos #opensource
🧹 shadcn/lint by #shadcn is an agent-first linter for #TailwindCSS design systems: write design system rules that #AI coding agents can verify
Geweldige podcast weer. Zo simpel is het niet.
Wel goed te bedenken dat de haast onvermijdelijke lijkende financiele ineenstorting, geheel of gedeeltelijk, niet leidt tot verdwijnen van AI. Ondermeer ook door chinese opensource/openweight modellen.
#NRC #AI #Kaartenhuis
https://open.spotify.com/episode/2757MgogoYAlFzAlzAbbci?si=K1qnC9VlR4G5qsmoA4tDuQ
vulnerability-lookup 6.0 will be released this week with many (really, many!) new features.
One of the smaller, but important, additions is support for multiple SSVC views alongside CVSS. When SSVC information is available from an ADP (such as CISA) , or from additional sources such as GCVE, it is now displayed by default.
This allows users to more easily compare the different severity and prioritization assessments associated with a vulnerability.
The CIRCL vulnerability-lookup instance is running the pre-release of 6.0 -
#cve #gcve #opensource #vulnerabilitylookup #opendata #vulnerabilitymanagement #cyberecurity #ssvc
@…
@…
We had difficulties automatically classifying chats, messaging channels, and forums. So we tested several open-weight large language models for our use case. The benchmark is published below, along with a tool supporting the classification process.
This helps us avoid manually classifying channels collected from dark-web forums and social networks, while reliably identifying which channels can be discarded and which deserve further analysis.
🔗 Publication #ai #llm #cybersecurity #darkweb #osint #opensource
🔍 #Hunk is a review-first terminal diff viewer for agent-authored changesets #opensource #git #cli
From a research paper to running open-source code in just a few days.
We (with @…) have been experimenting in Vulnerability-Lookup with the concept of Local Exploit Hazard, based on the recent research paper “Modeling Local Exploit Hazard — A Bayesian Framework for Quantifying Exploit Risk and Operational Efficiency” by Stephen Shaffer and Laura Cristiana Voicu.
The idea addresses an important question in vulnerability management:
Not simply “How dangerous is this vulnerability globally?” but “How much exploitation risk does this vulnerability represent in my environment?”
Instead of introducing yet another static vulnerability score, the model starts from exploit likelihood such as EPSS and combines it with local security controls, CVSS attack vectors, vulnerability age and KEV policy to estimate an exploitation hazard.
We implemented an experimental version in Vulnerability-Lookup and connected it directly to operational workflows.
For the full details: #cve #gcve #vulnerabilitymanagement #vulnerability #opensource #opendata
@…
📋 #Archify is an #opensource #AI #agent
The Radio Image Framing Protocol (RIFP) is an experimental, extensible standard for sending images over low-rate radio links. I did a new version 1.1 with an extension to authenticate the images.
The extension is now published as an Internet-Draft.
#rifp #radio #opensource #openstandard
🔗 RIFP source code https://github.com/adulau/rifp#optional-image-authentication
🔗 RIFP Standard https://datatracker.ietf.org/doc/draft-dulaunoy-rifp/
🔗 RFIP Authentication Extension https://datatracker.ietf.org/doc/draft-dulaunoy-rifp-auth/
🔐 #AgentVault is an #opensource HTTP credential proxy and vault from #Infisical that sits between #AIagents
The Tax Administration of the Netherlands has decided to move from M365 to opensource and on premis solutions for it's office environment. An important step.
Letter to dutch parliament and news article, in dutch.
#taxadministration #opensource #foss #Microsoft #M365
📋 #CrabTrap by #Brex is an #opensource HTTP/HTTPS proxy that sits between #AI agents and externa…
Working on a first super beta implementation of @… BCP-11 "Community-Proposed Updates to Existing CVE Records"
To validate if the BCP-11 can be published.
#cve #gcve #vulnerability #opensource #opendata
Discussions https://discourse.ossbase.org/t/gcve-bcp-11-community-proposed-updates-to-existing-cve-records/1110
☁️ #Floci is a free, #opensource local #AWS emulator built with #Quarkus Native — AWS-compatibl…
Goed nieuws in deze brief van Stas Eerenberg aan de Tweede Kamer. Hulde aan de @…
#opensource #belastingdienst #onpremis #foss
🎨 Inspo — real production websites your coding agent can study before it writes UI #opensource #MCP #webdev #AI
Rulezet and its ecosystem: how detection rules travel between tools.
Vulnerability-Lookup, AIL, Flowintel, MISP, Velociraptor and more: every tool that reads from Rulezet or receives its rules, what each connection does, and an interactive map of the whole ecosystem.
🔗 #threatintelligence #threatintel #rulezet #misp #opensource #cybersecurity #detectionengineering #flowintel #velociraptor #dfir
A standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster in the MISP Galaxy repository, and shared MISP Galaxy metadata. Graph rendering is performed by Pivotick.
Source code: #misp #cti #threatintelligence #opensource #threatactor #cybersecurity