I don't have time to keep up with all the daft Open Source projects I release. I wish my skill and my energy was as wide as my ambition. Several years ago, I came across Felix Geisendörfer's Pull …
by 
Jamie Tanna
.
#open-source.
We need more of Richard Stallman, not less écrit par Ploum, Lionel Dricot, ingénieur, écrivain de science-fiction, développeur de logiciels libres.
People seem to really have bought into the capitalist version of open source where software is still a product that requires support and marketing and a roadmap and exists to serve a user community separate and apart from the project. But a whole lot of open source is really just a sharing economy. It’s devs doing something they found useful and deciding to share it rather than hoard it. Those devs don’t owe anyone extra labor just because they chose to share.
by Jamie Tanna
.
#open-source.
IMHO, an underappreciated aspect of 'filing bug reports is (hard) work for people' is that it's hard work that often has no particularly immediate payoff. Filing a bug report will mostly not get the problem fixed immediately the way you want; at best it may get you a fix in the next release, which will arrive who knows when. Sparked by: https://hachyderm.io/@funnelfiasco/110344473863227729
by Jamie Tanna
.
#open-source.
To keep the modern technological world of open source software safe, it is critical to efficiently and accurately communicate information about open source vulnerabilities. The OSV Schema, created through the collaboration between OpenSSF members and housed within the Vulnerability Disclosures Working Group, provides a minimal, easy-to-use first class JSON format for describing vulnerabilities in open source software.
by Jamie Tanna
.
#open-source
#security.
I want open source maintainer to be a profession. A thing you start by joining something bigger than just yourself, and then you grow in it. And eventually spawn off your own thing, hopefully. 🗣️ @filippo@abyssdomain.expert https://youtu.be/OBWCM2G6_-I
by Jamie Tanna
.
#open-source.
FOSS licenses come in two approaches. The distinction is _who_ is granted the most freedom: - in "copyleft" licenses the emphasis is on the end-user, ensuring that they are _always_ passed the four freedoms; - in "permissive" licenses, the emphasis is on other developers/programmers, including allowing them to _not_ pass on the four freedoms. Is disappointing people still mistake this as being a difference between #FreeSoftware and #OpenSource because each has always supported both types.
Fake—or captive—open source can be defined as software that is released under a license that is not truly open.
by Jamie Tanna
.
#open-source.
For many open source consumers the "logical units" being depended on are libraries. However, the libraries themselves are only a product of what consumers are actually depending on: people. Y...
by Jamie Tanna
.
#open-source
#security.
Let's talk about Google's newest software supply chain product. Reading the GA announcement I had many mixed feelings. Starting with the good, compared to other implementations of "curated open s...
by Jamie Tanna
.
#open-source
#security.
Posted by Jesper Sarnesjo and Nicky Ringland, Google Open Source Security Team Today, we are excited to announce the deps.dev API , which...
by Jamie Tanna
.
#open-source
#security.
A GitHub action to generate a stackaid.json file based on your repository's dependency graph - GitHub - stackaid/generate-stackaid-json: A GitHub action to generate a stackaid.json file based o...
A few thoughts on GitHub’s practice of keeping their code synchronized with Rails <code>main</code>.
by Jamie Tanna
.
#open-source
#github
#rails.
This is cool, I've been considering what the process is for setting one of these up recently
We are open sourcing our own OSPO policies, tools, and guides to help other OSPOs get started. See how you can get started. github.blog/2023-03-13-an-…GitHub (@github)Fri, 31 Mar 2023 12:07 +0000
by Jamie Tanna
.
#open-source
#github.
A handy guide to financial support for open source - GitHub - nayafia/lemonade-stand: A handy guide to financial support for open source
by Jamie Tanna
.
#open source.
relicensing and lack of resources for maintainers are only two top-level issues plaguing open source
by Jamie Tanna
.
#open-source.
Licensing is what holds open source together, and ClearlyDefined takes the mystery out of projects' licenses, copyright, and source location.
by Jamie Tanna
.
#open-source.
It works! I am now a full-time independent open-source maintainer. I'm announcing my first cohort of six clients, and sharing some details of how the model works.
by Jamie Tanna
.
#open-source.
Periodic reminder
Alex 🚀 (@AlexJonesax)Mon, 30 Jan 2023 10:49 GMT
by Jamie Tanna
.
#open-source.
Open source people: "open source fucking sucks, it's not sustainable. Nobody pays you for all your hard work and everyone is way too entitled, thinks you owe them something." Also open source people: "join us, it's easy, just find a repo of a cool project and start helping out!"Plausible Sounding-Guff @monkchips@mastodon.social (@monkchips)Fri, 27 Jan 2023 09:37 GMT
by Jamie Tanna
.
#open-source.
Performing arbitrary executions with Renovate (2 mins read).
How to run Renovate for one-off package upgrades, rather than using it for longer term maintenance.
by Jamie Tanna
.
#blogumentation
#renovate
#open-source
#security
#typescript.
Extracting the dependency tree from Renovate for given repositories (4 mins read).
Creating a (hacky) solution to retrieve the dependency graph from Renovate for a set of repositories.
by Jamie Tanna
.
#blogumentation
#renovate
#open-source
#security
#typescript
#dependency-management-data.
Automattic acquired Pocket Casts last July, and since we’ve been tapping away trying to make the best podcast client for people who love listening to podcasts. And! The team has been working …
by Jamie Tanna
.
#podcasts
#open-source.
Does the tech industry thrive on free work? (6 mins read).
Thinking about how there are subtle expectations to work on your career outside of tech, and how it's not necessarily great.
by Jamie Tanna
.
#career
#job
#adhd
#open-source
#mental-health.
Analysing our dependency trees to determine where we should send Open Source contributions for Hacktoberfest (8 mins read).
How we (at Deliveroo) are using GitHub Advanced Security's dependency scanning functionality to determine what our most popular dependencies are, and whether we can find any Open Source contributions for the month of Hacktoberfest.
There have been discussions in the aftermath of the log4j vulnerability about whether or not open source is broken or sustainable, what we can do to improve the sustainability of the open source ecosystem moving forwards, and the entitlement of users and companies in expecting maintainers to fix their problems.
by Jamie Tanna
.
#open-source.
💶 Instead of sponsoring open-source contributors for their work, sponsor them to go on vacation. 🏝️ (Suggested by @Tixie_)Mara Bos (@m_ou_se)Fri, 16 Sep 2022 15:31 +0000
by Jamie Tanna
.
#open-source.
Do open source, they said. It will be great, they said.
snipe, lixo tóxico ⭑⭒⭒⭒⭒ (@snipeyhead)Thu, 25 Aug 2022 17:29 +0000
by Jamie Tanna
.
#open-source.
I think the world would be a better place if we viewed forks of free software as officially endorsed fan fiction
Matthew Garrett (@mjg59)Thu, 25 Aug 2022 10:03 +0000
by Jamie Tanna
.
#open-source
#shitpost.
by Jamie Tanna
.
#open-source.
What do Docker, GitLab, and Red Hat have in common? Aside from various levels of participation in open source, they’ve all been punching bags over the past few years for non-paying users angr…
"Running a successful open source project is just Good Will Hunting in reverse, where you start out as a respected genius and end up being a janitor who gets into fights." Quote attributed to @cra, and I don't think I've ever seen anything more true posted.Jens Axboe (@axboe)Fri, 12 Aug 2022 17:16 +0000
by Jamie Tanna
.
#open-source.
For many open source consumers the "logical units" being depended on are libraries. However, the libraries themselves are only a product of what consumers are actually depending on: people. Y...
Idea for Open Source/Startup: monetising the supply chain (2 mins read).
An idea I've had for how to better distribute support to Open Source libraries in the supply chain for your software.
Always include a complete example on how to reproduce your problem. signed, all your OSS maintainersMatteo Collina (@matteocollina)Tue, 10 May 2022 16:04 +0000
by Jamie Tanna
.
#open-source.
Hey, students and professors: Making fake commits against real OSS projects is not a valid class assignment. It wastes people's time, irritates them, and gives the student a bad reputation on Github and OSS. Don't do it.Berkubernetus (@fuzzychef)Fri, 08 Apr 2022 21:00 +0000
by Jamie Tanna
.
#open-source.
https://twitter.com/erikbtweets/status/1513072362752823298
You can't just pick some repo on github and demand the maintainer teach you how to participate in an Open Source project. That's not how any of this works.Joe Cooper 🌻🇺🇦🌻 (@swelljoe)Sun, 10 Apr 2022 09:34 +0000
by Jamie Tanna
.
#open-source.
So here's why I bought a receipt printer: Every time one of my GitHub repos gets a new issue, I now get a physical ticket printed out on my desk 🪄Andrew Schmelyun (@aschmelyun)Thu, 24 Mar 2022 11:44 GMT
https://twitter.com/_msw_/status/1506459050594082820
I have noticed what seems like an almost generational divide in people who contribute to open source. Those who did open source before 2015, and those who think GitHub = OpenSource. 🙃Aeva ✈ ShmooCon! ✨ (@aevavoom)Wed, 23 Mar 2022 14:58 GMT
by Jamie Tanna
.
#github
#open-source.
People who say "open source isn't a place for politics" might be unfamiliar with the decades-long social movement. It's always been political.msw (@_msw_)Fri, 18 Mar 2022 15:11 GMT
by Jamie Tanna
.
#open-source.
I talked about this yesterday wrt pinning your dependencies, but these sorts of actions, even if the rationale comes from a good place, are NOT OK. twitter.com/techmeme/statu…Post details
Maintainer of the popular open source networking tool node-ipc appears to have sabotaged the tool's code to wipe data on computers based in Russia and Belarus (@josephfcox / VICE) vice.com/en/article/dyp… techmeme.com/220318/p9#a220…Techmeme (@Techmeme)Fri, 18 Mar 2022 16:51 GMT
Christina Warren (@film_girl)Fri, 18 Mar 2022 19:29 GMT
by Jamie Tanna
.
#open-source.
https://twitter.com/juliaferraioli/status/1499449536934137856
At some point, we're going to have to have a brutally honest conversation about the cult of personality in open source.
julia ferraioli (@juliaferraioli)Thu, 03 Mar 2022 18:21 GMT
I don't say stuff like this often, but if you think that #OpenSource is about one person, you are doing it wrong.julia ferraioli (@juliaferraioli)Thu, 03 Mar 2022 18:20 GMT
Happy to see @nodejs be fully free at last. When considering @deno_land and other venture backed similar projects, remember to take the governance model of those projects into account. It can have quite the impact over time.Post details
Exciting news today! Joyent has transferred ownership of the Node.js trademarks to the OpenJS Foundation to help protect the work of the Node.js collaborators. We’ve worked hard to make OpenJS a stable, neutral home for the JavaScript community. openjsf.org/blog/2022/02/1…OpenJS Foundation (@openjsf)Mon, 14 Feb 2022 17:03 GMT
Pelle Wessman (@voxpelli)Mon, 14 Feb 2022 17:59 GMT
by Jamie Tanna
.
#open-source.
💝 Still shopping for Valentine's day? Here's the perfect way to show that special somebody you love them.* *If they are an open source contributor you appreciate. Others might prefer some flowers. We ❤️ open source. Share your love too. oss.loveNetlify (@Netlify)Sun, 13 Feb 2022 09:59 GMT
by Jamie Tanna
.
#open-source.
