Post details
Attached: 1 image I love being an open source maintainer, we get the best email from only the most delightful people. 🙃 . (maybe i should just switch to macOS and stop caring about linux 🙃 )
Attached: 1 image I love being an open source maintainer, we get the best email from only the most delightful people. 🙃 . (maybe i should just switch to macOS and stop caring about linux 🙃 )
OggCamp 2024 (14 mins read).
A recap of this weekend's OggCamp 2024 conference.
Open source is proof free markets are so efficient they can even find a use for communists.
How to use Dependency Management Data to discover which dependencies are participating in Hacktoberfest (3 mins read).
Detailing how you could use dependency-management-data to gain insight into which dependencies you use are participating in Hacktoberfest.
Contributing to open source is a privilege. It doesn't mean you have cheated to do it or that you don't deserve praise for doing it! It only means that not everyone can do it. You need the skills, time and will to do it in addition to doing whatever you need to have a good life. Not everyone has that time. Not everyone works in the field. We must acknowledge it to meaningfully convey the value of open source in society. #opensource #privilege
<p>Folks, today's the day.</p> <p>As of this morning, I've made over a million dollars on GitHub sponsors. Wowoweewow.</p> <p><img src="/pos...
Content warning: Tech culture
Microsoft is experimenting with and investing in sustainability of the open source ecosystem sponsorships. Learn more.
Announcing Geomys, a small firm of professional maintainers with a portfolio of critical Go projects.
After signing up for GitHub Sponsors, I had a nagging feeling that somehow asking for money from other people to support my open source work was inappropriate. But after much reflection, I realized that phrasing the use of GitHub Sponsors as a way to express patronage/support and appreciation for
A JavaScript library maintainer is under fire after merging a controversial PR to support legacy versions of Node.js.
Will Yaak be open source? The short answer is no, there are no plans of going open source. Instead, Yaak will…
Attached: 1 image idk why people say funding OSS is difficult
Attached: 1 image Tips to prevent maintainer burnout from the beautiful soup maintainer. A single maintainer managing a package will millions of users *ask users to contribute issues before a pr * practice defensive programming. Use warnings to point to common user mistakes #pyconus #python #opensource
Creating a more sustainable model for oapi-codegen
in the future (9 mins read).
Announcing a request for sponsorship to continue to allow allocating more time to oapi-codegen
as well as to make more ambitious changes to the project.
oapi-codegen is moving to its own org (7 mins read).
Announcing oapi-codegen
's move to its own GitHub org, and a history lesson about the project.
For the last ~7 weeks on-and-off rewriting the documentation for oapi-codegen
which has needed a fresh version for a bit of time. On top of that, I've spent pretty much the last two days solidly finishing it off, and am very glad to have just merged it!
Documentation can be difficult to do - especially if you're redoing it all in one go - but am hoping it's in a much better place for new and existing users alike!
Also introduces a CONTRIBUTING.md
for the first time, and I ended up adding 14 new examples to the examples directory because I couldn't quite remember how things worked 😅
With the recent xz hack in the news, it's crucial to support maintainers of open source projects. Fastly has been doing just that with our open source program, Fast Forward.
A short document describing how I maintain open source projects. It talks about how I prefer issues to PRs, how I work in batches, and how I'm trigger-happy with bans. It's all about setting expectations.
Free and open source software has become a modern commons, but now it's vulnerable. Freedom isn't sufficient to secure it for the future.
Originally a thread on Twitter about the xz/liblzma vulnerability, when I finished typing it, I realized I had a real world slice of Open Source interaction that deserved more attention.
What can we learn about the backdooring of xz
/liblzma
, using OpenSSF Security Scorecards and dependency-management-data? (6 mins read).
Looking at how the recent CVE-2024-3094 vulnerability could provide insight into other cases of risk in dependencies and their lack of code review.
The topic of Polyfill.io and its sale came across my radar about a week ago when Tobie Langel shared...
When I started writing and publishing open-source software about 15 years ago, I was pretty radical about it. I only used permissive licenses like MIT or BSD, as all I cared about was reach. Using a copyleft license with strings attached seemed to hinder that reach. Getting another A-category company
“Open Source Economics” and the “Open Source Economy” are regularly discussed in the context of how to improve open source software’s sustainability, contributor diversity and ecosystem quality. Too often, though, the use of the word “economics” brings incorrect assumptions about the problems to be solved.
Bruce Perens is angry. A veritable Jeremiah amid a throng of open source Pollyannas at OpenUK's State of Open Con 24 in London, the co-founder of the Open Source Initiative (OSI) and the Open Source Definition, railed against what he sees as corporate capture of the movement he helped to kickstart.
Open source doesn't mean open build. Why open source projects aren't required to product all the builds.
I'm at the point where people complaining about projects that are underfunded & consequently understaffed not moving "fast enough" is just going to start resulting in blocks. I'm not gonna waste my time arguing with you because thing's didn't happen at your pace. Seriously, these projects take an absolute tonne of work. You want stuff to move faster, start throwing money at it so people can dedicate full time towards doing things.
Here's a good example of how I like to use issue threads. The issue opens with a description that includes relevant linked code snippets, documents some design decisions and micro-research I performed, includes the commit that fixes the issue, links to the docs and shows some follow-up work before linking to the release that incorporated the changes Goal is to tell the full story of the problem and its solution so I can fully understand it when I revisit much later https://github.com/simonw/datasette/issues/2277
Market and opportunity explorer for open-source software engineers. Find a dev job in Rust, Go, TypeScript, Solidity and get paid to work with open-source.
Note: I deleted >1000 words and decided to post a summary instead. Jacob Kaplan Moss slacked me his article today because he knew I’d like it, and we have both had ongoing conversations for years about open-source Funding. It’s worth reading. I mistakenly submitted the article to the orange website because I assumed someone else already had it. Oops. I support funding open-source projects. We are trillions of dollars away from providing enough Funding for open-source software before I have the patience to set through any debates about the right or wrong way to fund them.
If you have a problem with maintainers getting paid then you have a problem with me and I suggest you let that one marinate.
Quantifying your reliance on Open Source software (State of Open Con version) (20 mins read).
A writeup of my talk about the dependency-management-data project at the State of Open Con 2024 conference.
Got some excellent swag recently from Tidelift for becoming a Tidelift Lifter last year 🙌 Love some high-quality swag, and 100% agree we should be supporting #OpenSource maintainers!
🗒️ Notes from a tired maintainer. Contribute to pi0/tired-maintainer development by creating an account on GitHub.
Here's a tough but common situation for open source maintainers: You want a project you co-maintain to be more secure by reducing the attack surface. There are one or more folks in privileged rol...
You're currently viewing page 1 of 6, of 294 posts.