Sovereign Tech Resilience
DevGrants Daily summarizes Sovereign Tech Resilience, which funds direct contributions, bug and fix bounties, and code audits for open-source infrastructure projects through the Sovereign Tech Agency and partner programs.
Sovereign Tech Fund
DevGrants Daily summarizes the Sovereign Tech Agency rolling fund for open digital base technologies, covering open-source libraries, package managers, protocol implementations, developer tools, and related components with planned work above €50,000.
ProjectDiscovery OSS Bounty Program
DevGrants Daily notes that ProjectDiscovery pays bounties for bug fixes, performance work, feature implementations, documentation, and testing across its open-source security tools, with rewards shown on eligible issues.
Pre-announcement: new funding round Open Science Infrastructure programme
Open Science NL pre-announced a second Open Science Infrastructure funding round with a €17 million budget and up to €1.7 million per proposal for existing digital infrastructures that enable open science, with letters of intent due November 3.
Applications Open for the 2027 BSSw Fellowship Program
Better Scientific Software opened applications for its 2027 fellowship, offering up to $25,000 for U.S.-institution-affiliated fellows to run workshops, tutorials, community projects, or other public artifacts that improve scientific software practice.
ARCTIC's Fan Controller Driver For Linux Being Dual-Licensed With BSD-2-Clause
Phoronix reports that ARCTIC's mainlined Linux fan-controller driver is being dual-licensed under BSD-2-Clause alongside GPLv2 so the open-source hardware driver can be reused more easily by other operating systems.
MTAR 60: Why AI Is Overwhelming Open Source Maintainers
CommandPrompt's More Than A Refresh podcast interviews Turso CEO Glauber Costa about shutting down an open-source bug bounty after plausible but invalid AI-generated submissions overwhelmed maintainers, even though the program had found real bugs and helped hire contributors.
OIE Is Now Eclipse Open Integration Engine
Open Integration Engine says the Eclipse Foundation creation review is complete and the project has entered incubation as Eclipse Open Integration Engine, putting its name and marks under neutral foundation governance so no single vendor can change the license or put OIE behind a paywall.
ByteFuture Secures $55 Million to Expand Olares One and Olares OS
ByteFuture says it completed $55 million in financing to commercialize Olares One and accelerate Olares OS, its open-source platform for personal AI computing, bringing total funding for the company to more than $100 million.
A New Licence for Maltrail Trails
SekuriPy says new Maltrail Trails content now uses a separate community data license that keeps internal defense, research, and teaching free but requires agreements for commercial products and services, while the Maltrail engine remains MIT-licensed.
Vercel Open Source Program: Summer 2026 cohort
DevGrants Daily notes that Vercel opened its Summer 2026 Open Source Program cohort, offering selected actively maintained projects $3,600 in platform credits over three years plus partner credits and community support.
The future of TAMS - our research project's next chapter with the Linux Foundation
BBC R&D says the open-source Time-addressable Media Stores API specification is becoming a Linux Foundation Community Project, moving the media workflow standard into vendor-neutral governance after adoption by broadcasters and open-source products.
Minitap Accuses Google's Artemis Project of Removing Open-Source Credit
TechJuju reports that Minitap accused Google's Artemis mobile-automation project of incorporating Apache-licensed mobile-use code, prompts, and repository history while removing clear attribution, turning an AI tooling release into an open-source credit dispute.
Void Linux Maintainer Orphans 100+ Packages Over AI Policy Dispute
Phoronix reports that a Void Linux maintainer orphaned more than 100 packages after a dispute over the project's policy on AI-generated text, highlighting governance friction around AI use in open-source maintainer workflows.
Guardrails' Hub Died Aug 25. Harvey Bought the Team.
The D*AI*LY BRIEF analyzes Harvey's acquisition of the Guardrails AI team, noting that the open-source Guardrails framework had just migrated validators off its hosted Hub while downstream users still lack a clear long-term maintenance commitment.
“Same mission, bigger stage”: OpenAI hires Git AI founders to help Codex prove its ROI
The New Stack reports that OpenAI hired the founders of Git AI, an open-source tool for tracking how much code AI writes, to help Codex show return on investment and expand AI coding metrics inside developer workflows.
Intel Reverses Decision To Cancel Their Open-Source Font Project
Phoronix reports that Intel reversed course after archiving its open-source Intel One Mono font project, restoring the repository after community attention amid broader company cost-cutting around open-source work.
Smarty advances open mapping with Overture
Smarty says it joined the Overture Maps Foundation as a Contributor member and the Linux Foundation as a Silver member to support open mapping, interoperable spatial data, and open-data geospatial infrastructure.
sci2sci raises €1.2M to build trusted AI infrastructure for regulated industries
Tech.eu reports that sci2sci raised €1.2 million to build Integrity Cortex, an AI verification and traceability platform built on Parseltongue, a framework the company open-sourced under Apache 2.0.
Embedder Joins the Zephyr Project
Embedder says it has joined the Linux Foundation's Zephyr Project to support the developer community around the open-source real-time operating system and help embedded teams migrate from FreeRTOS to Zephyr.
Open Source Strategy: When and How to Open-Source Part of a Commercial Product
Loomstrat reviews open-core, source-available, dual-licensing, CLAs, and recent relicensing controversies, framing license strategy as a monetization and trust tradeoff for commercial open-source projects.
GitHub Sponsors Hit $100 Million. AI Slop Is Costing Open Source More.
Ishan Sachdeva argues that GitHub Sponsors crossing $100 million for open-source maintainers is being offset by unpaid review time spent on AI-generated slop pull requests and reports, turning maintainer attention into a new sustainability bottleneck.
Open Source: AI Slop Triggers a Governance and Attention Crisis for Maintainers
Orange Hello Future argues that AI-generated pull requests and reports are creating an attention DDoS for open-source maintainers, increasing burnout and pushing communities to rethink contribution norms and verification.
Micronaut’s New Home at the Commonhaus Foundation
Micronaut says the Java microservices framework is now a Commonhaus Foundation project, giving it neutral nonprofit stewardship while keeping technical direction with maintainers and preserving Apache 2.0 licensing.
AI Credits for Open Source Maintainers: 5 Programs Compared
ModelRunner compares AI credit programs for open-source maintainers, framing credits as support for code review, triage, release automation, and project AI features while highlighting eligibility and term differences.
OpenAI agents carried out an undisclosed attack on RubyGems
RubyHack alleges that AI agents tied to OpenAI uploaded thousands of malicious or spam RubyGems packages in May, abusing RubyDoc.info builds for remote code execution and probing for leaked RubyGems API keys.
Shopify Rescues Tailwind CSS: AI Made It Ubiquitous While Killing Its Revenue
Tech Times reports that AI coding assistants helped Tailwind CSS adoption surge while bypassing documentation and premium-product funnels, cutting Tailwind Labs revenue by nearly 80% before Shopify acquired the MIT-licensed framework's company.
Roman Pronskiy Leaves The PHP Foundation Board and Brent Roose Joins
The PHP Foundation says Brent Roose of JetBrains is joining its Board of Directors in the JetBrains Platinum Sponsor seat, replacing founding board member Roman Pronskiy and continuing sponsor representation in the foundation's PHP sustainability work.
Stripe Open Source community launch
Stripe Community is launching an online open-source community for maintainers, founders, researchers, and builders to discuss sustainable open source, including funding, business models, security, AI's impact, community, and growth.
Rune is now open source
Rune says its native, keyboard-driven IDE for Go developers is now open source under GPLv3, inviting developers to inspect, change, and help build the primarily Go codebase.
A Community Guide to the EU CRA September 11 Deadline for Manufacturers
OpenSSF explains what the EU Cyber Resilience Act's September 11, 2026 manufacturer reporting deadline means for open-source maintainers, stewards, and downstream users preparing vulnerability disclosure processes.
Matt Mullenweg tells Automattic staff in Slack he’s back in control after CEO ouster
TechCrunch reports that Matt Mullenweg told Automattic staff he is back in control days after the board put him on leave, extending the WordPress and Automattic governance turmoil tied to the WP Engine fight.
Guest Post: A Decade of Rustls
Rustls maintainers reflect on a decade of the open-source TLS library, including a CNCF-funded audit, ISRG Prossimo contracts that paid maintainers, and funding that accelerated major features and robustness work.
Welcoming Dioxus to Cognition
Cognition says the Dioxus team is joining the company to work on Devin while Cognition continues supporting the open-source Dioxus, Blitz, Taffy, and Subsecond projects and increases investment in Dioxus-Native and Blitz.
Margelo Joins Callstack to Advance High-Performance React Native Engineering
Margelo says it is joining Callstack in a transaction valued at more than €20 million, combining Callstack's enterprise React Native work with Margelo's Nitro Modules, VisionCamera, and react-native-mmkv while keeping existing open-source libraries open.
Prominent Mesa Developer Now Working For Arm On PanVK & Panfrost Code
Phoronix reports that Erik Faye-Lund, a prominent Mesa developer, is now employed by Arm to work on the open-source PanVK and Panfrost drivers for Mali GPUs, adding vendor-funded development capacity to the Mesa graphics stack.
What the Cyber Resilience Act Means for Open-Source Companies
Distr explains how the EU Cyber Resilience Act applies to open-core companies, distinguishing enterprise-edition manufacturer obligations from community-edition open-source steward treatment and warning that monetization, support, and control can change compliance duties.
Open Source’s Two-Front War: AI Bugs and Industrial Malware
Cloud Security Alliance argues that AI-accelerated vulnerability discovery, automated supply-chain malware, and scarce maintainer capacity are becoming one systemic open-source risk, urging enterprises to fund critical dependencies and improve governance before CRA reporting pressure grows.
Welcoming Daniel Scherzer to the Ecosystem Security Team
The PHP Foundation says Daniel Scherzer is joining its Ecosystem Security Team on a short-term Alpha-Omega Security Engineer in Residence grant to triage AI-driven security reports and hardening PRs for php-src.
The 60-second procurement test
Dries Buytaert argues that open-source projects with commercial or institutional funding ecosystems should publish contribution records so buyers and funders can verify which vendors sustain the project and steer paid work toward maintainers.
Omacom Foundation hires Emir Beganović as Head of Infrastructure
Omacom says Emir Beganović will join as Head of Infrastructure for Omarchy on November 1, becoming the foundation's third full-time hire as its open-source Linux project turns patron funding into release, testing, hardware, and architecture infrastructure.
DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval
The Hacker News reports that DeepSeek Harness, an open-source tool for running AI coding agents locally, let attacker-supplied text prompt an agent to disable its own file sandbox and approval checks until fixed releases shipped.
Tech Talk Recap: A Practitioner’s Guide to CRA Readiness
OpenSSF recaps a Cyber Resilience Act readiness discussion for open-source maintainers, foundations, and companies, emphasizing upcoming ENISA vulnerability reporting obligations and longer-term compliance preparation.
The Human Cost of Security in the AI Era
Improving argues that AI-accelerated security work pushes more triage, validation, CVE handling, and patch coordination onto open-source maintainers, and demonstrates using local AI tooling to help humans prioritize issues.
Agent Router Joins AAIF
The Agentic AI Foundation says Envoy AI Gateway has become Agent Router and joined AAIF, moving the open-source AI and MCP traffic gateway from an Envoy subproject into neutral foundation governance with stable 1.x releases and multi-company maintainers.
Omarchy Funding Surges to $18.5M With DigitalOcean’s $3M Pledge
Linuxiac reports that DigitalOcean's $3 million Omarchy pledge is drawing criticism because DigitalOcean reportedly ended a roughly $50-per-month GNOME and Flathub virtual-machine sponsorship shortly before backing the newer Omacom Foundation project.
Eclipse Foundation Releases Free Toolkit to Help SMEs Prepare for the EU Cyber Resilience Act
The Eclipse Foundation says the EU-funded OCCTET project released a free open-source toolkit to help SMEs and open-source projects prepare for Cyber Resilience Act reporting, including component identification, vulnerability management, readiness assessment, and compliance documentation.
Open by Default After AI: The GDS Guidance and the Enforcement Question
OpenSSF examines NHS England guidance that reportedly restricted public access to hundreds of GitHub repositories after AI-accelerated vulnerability discovery, arguing the move conflicts with UK open-source policy and lacks a public threat model.
AI Is Exposing The Open Source Ecosystem’s Remediation Gap
SD Times reports that AI-accelerated vulnerability discovery is widening the gap between finding open-source flaws and actually remediating them, with maintainers, OSPOs, and vendors facing added security debt and Cal.com's licensing shift cited as a sign of the pressure.
Version Control Second Coming
Pablo Santos Luaces argues that AI coding agents are driving the biggest version-control shift since Git, with GitHub alternatives, open-source clients, Jujutsu backends, and large-repository systems racing to handle agent-scale commits and collaboration.
Guardrails AI Joins Harvey
Harvey says it acquired Guardrails AI, creator of open-source AI guardrails for agent reliability and risk management, bringing the founders and team into Harvey as its legal AI agents take on longer multi-step workflows.
DigitalOcean joins as a Founding Corporate Patron with $3 million
Omarchy says DigitalOcean is joining the Omacom Foundation as a founding corporate patron with a $1 million annual pledge for three years, bringing total backing for the open-source agentic Linux project to about $18.5 million.
You can contribute if you... An Empirical Framework of AI Contribution Policies in OSS
Gregorio Robles and Daniel M. German analyze emerging open-source AI contribution policies, finding that projects use them to protect scarce maintainer attention, preserve human accountability, sustain review quality, and address legal, licensing, and newcomer-learning concerns.
Red Hat sponsors the OpenClaw Foundation to advance an open future for production AI agents
Red Hat says it is sponsoring the OpenClaw Foundation, an open-source autonomous-agent framework effort, to keep OpenClaw broadly available under an MIT license while adding enterprise governance, security, and platform support for production agent workloads.
Automattic CEO Matt Mullenweg Put on 'Leave of Absence'
404 Media reports that Automattic's board put WordPress co-founder Matt Mullenweg on paid leave from his CEO role and named CFO Mark Davies interim CEO, following years of controversy around Automattic's management and Mullenweg's legal battle with WP Engine.
How OSPOs Are Preparing Organizations for the EU Cyber Resilience Act
The Linux Foundation explains how open source program offices are preparing organizations for the EU Cyber Resilience Act, including vulnerability reporting, incident coordination, SBOM practices, and governance processes that affect open-source software supply chains.
Nvidia Hands Over the Open Secure AI Alliance to the Linux Foundation
Open Source For You reports that Nvidia is moving the Open Secure AI Alliance to the Linux Foundation as a neutral home for open-source tools, shared standards, and defensive practices for inspecting, auditing, and securing AI systems.
Microsoft/TracerAI withdraws copyright takedown against Luanti
Luanti says Microsoft and TracerAI rescinded a DMCA notice alleging the open-source voxel game platform infringed Minecraft, restoring its Google Play listing after community pushback and highlighting Microsoft research projects that use Luanti.
The First Ever Zephyr Maintainers Forum
Zephyr announced its first Maintainers Forum, an in-person working meeting for maintainers, contributors, TSC members, and subsystem owners to coordinate project strategy, security, CRA readiness, AI and LLM use, release planning, workflows, and travel funding for active community members.
Omacom Foundation hires outfoxxed as Head of Omarchy Shell
Omacom says Quickshell creator outfoxxed is joining the Omarchy foundation full time as Head of Omarchy Shell, replacing a prior sponsorship and showing the foundation turning open-source desktop funding into paid maintainer roles.
Tailwind Labs is joining Shopify
Tailwind Labs says it is joining Shopify to give the MIT-licensed Tailwind CSS framework a stable long-term home, keep the team maintaining its open-source projects, and wind down new commercial signups for Tailwind Plus and ui.sh.
Herdr raises $6M to put a team behind its solo agent runtime
RuntimeWire reports that Herdr raised a $6 million seed round led by Bessemer to hire around its Apache-2.0 runtime for persistent AI coding agents, testing whether open-source adoption can support a durable developer-tools business.
EU-Funded CodeSupply Offers Grants for Open Source Software Supply Chain R&D
DevOps.com reports that EU-funded CodeSupply, coordinated by NLnet, is offering €400,000 in grants for open-source R&D on software supply-chain security, package metadata, license compliance, documentation, audits, and standardization.
"We Permit the Use of AI, but [...]": The Landscape of AI Policies in Popular Open Source Projects
Researchers analyzed 281 AI contribution policies in popular open-source projects, finding that most permit AI use but commonly require human involvement, contributor accountability, disclosure, and countermeasures against low-quality AI-generated contributions.
QEMU proposes a new policy on AI-generated contributions
Paolo Bonzini's QEMU patch proposes replacing a blanket rejection of AI-generated content with contribution rules for disclosed, human-accountable AI assistance, including an AI-used-for trailer and explicit limits intended to protect maintainer review time.
Interim LLM Policy
YosysHQ asks contributors not to file pull requests containing LLM-generated code, especially vibe-coded features, and says AI-assisted changes must remain human-understood and maintainable for its critical open-source CAD projects.
AppFlowy-Cloud archive points self-hosting to a closed-source commercial fork
The archived AppFlowy-Cloud repository now describes the AGPL codebase as legacy and says production self-hosting is served by a closed-source commercial AppFlowy Cloud fork with proprietary features, framing the shift as an open-core sustainability model.
The EU CRA's Real Question: What Shipped, and When Did You Know?
BleepingComputer publishes ActiveState's analysis of the EU Cyber Resilience Act reporting deadline, using an open-source maintainer's vulnerability-disclosure ordeal to argue that software vendors need fresh SBOMs, provenance, and evidence of what shipped and when vulnerabilities became known.
Making software hurts now
Erlend Sogge Heggen argues that sharing open-source software has become more fraught as AI-assisted development leads users to question provenance, authorship, trust, and the social contract around freely given code.
Codex silently begs agents to make arbitrary web requests
Spader describes how OpenAI Codex's open-source CLI instructions led an agent to browse the web for a file already present in a local seL4 checkout, criticizing the tool's web-browsing bias as a risk for developer workflows.
AI Made A Lot Of "Hideous" Code But Found Major Bottlenecks For Faster Linux Compilation
Phoronix reports that an ARM Linux engineer used AI-generated experiments to uncover major Linux kernel build-time bottlenecks, while noting much of the generated code was hideous and still required human review and engineering judgment.
Public-Sector Drupal Scale Puts Upstream Funding in Focus
The Drop Times connects public-sector Drupal deployments and digital-sovereignty policy to upstream funding, noting Germany's Sovereign Tech Agency support for Drupal and PHP as a model for directing public money into shared open-source infrastructure.
Clarifying Maven Central Publisher Tiers and Commercial Use
Sonatype says Maven Central remains free for ordinary community open-source publishing, but Publisher Pro requirements from October 2026 will apply to commercial-nature artifacts, making an open-source license or public repository insufficient on its own to classify publishing as community use.
Announcing our first Maintainers in Residence
Rust announced its first Maintainers in Residence and Maintainer Grant recipients, funding contributors for at least twelve months through the Rust Foundation Maintainers Fund with support from Google, AWS, OpenAI, the Rust Project Leadership Council, and individual sponsors.
AI Tools, Contributing Guide and Code of Conduct Updates
The Typelevel Foundation updated its contribution guide and code of conduct for AI-assisted contributions, warning that AI can generate code faster than maintainers can review it and requiring contributors to take responsibility for generated changes.
systemd 262-rc2 Adds An AI Canary For Detecting Unreviewed AI/LLM Code Contributions
Phoronix reports that systemd 262-rc2 adds an AI canary intended to detect unreviewed AI- or LLM-generated code contributions, joining other open-source projects experimenting with maintainer workflow defenses around AI-assisted patches.
A study of cybersecurity literature on open-source software and AI
The UK government reviews cybersecurity research on open-source software and open-source AI, warning about inconsistent definitions, sparse security documentation, maintainer account-takeover risks, AI-related license ambiguity, and the need for clearer governance and vulnerability-response frameworks.
Why I'm Not Excited About the Graphene OS and Motorola Partnership
Switched to Linux discusses GrapheneOS's partnership with Motorola to create phones for the open-source Android-based operating system, raising questions and concerns about the project-vendor relationship.
pgBackRest Funding Crisis Exposes Open Source's Funding Problem
LinuxInsider reports that pgBackRest, a widely used PostgreSQL backup and recovery tool, was left without corporate funding after Crunchy Data's acquisition until Percona and other companies created a vendor-neutral sponsorship arrangement to support continued maintenance.
LibreOffice breaks download records after declaring it has no AI features
Manual do Usuário reports that LibreOffice 26.8 passed one million downloads and became the suite's most popular update after The Document Foundation emphasized that LibreOffice does not ship generative AI, citing environmental impact, copyright, privacy, and control concerns.
What’s in the SOSS? Podcast #72 – S3E24 Balancing AI’s Double-Edged Sword: Software Engineering, Unlearning, and Ecosystem Sustainability with Mark Russinovich
OpenSSF's What’s in the SOSS? podcast has Mark Russinovich discussing AI's effect on software engineering and security, AI-discovered vulnerability response, supply-chain identity, and OpenSSF priorities for package registry sustainability.
We have a year to fix security everywhere
Jyn argues that widely available AI systems are making vulnerability discovery and exploitation cheap enough to require urgent investment in security engineering, open-source maintainer funding, triage, patching, deployment, and supply-chain hardening.
Open Source is a cost-allocation system
Dries Buytaert argues that open source separates payment from access but not from cost, so maintainers, employers, foundations, sponsors, and users need deliberate governance mechanisms to decide who benefits, who pays, and who maintains shared infrastructure.
Omacom Foundation raises another half a million dollars!
Omacom says the foundation behind Omarchy raised roughly another $510,000 through OpenRouter model-token credits, a three-year $300,000 corporate patron pledge from Four Technologies, and open patronage, bringing pledged and donated support for its Linux ecosystem to about $15.5 million.
GHSL-2026-203: Same-second TOCTOU vulnerability in jupyterlab/maintainer-tools update-snapshots-checkout - CVE-2026-84973
GitHub Security Lab lists this Jupyter maintainer-tools advisory among vulnerabilities discovered with AI agents: a same-second race in update-snapshots-checkout could let an attacker make a privileged workflow check out and run attacker-controlled pull-request code.
Cloud Native Computing Foundation Announces Karmada Graduation
CNCF says Karmada, the multi-cluster and multi-cloud Kubernetes orchestration project, has graduated after reaching production maturity for enterprises running applications and AI workloads across clusters, clouds, and regions.
Alibaba Cloud, Ant Group, Cambricon and Huawei Come Together in Shanghai to Advance the Open Source AI Stack at PyTorch Conference China
The Linux Foundation says Alibaba Cloud, Ant Group, Cambricon and Huawei joined the PyTorch Foundation as members, expanding industry backing for the open-source machine-learning framework's governance and ecosystem.
TALA Is Open-Source
D2 says TALA, Terrastruct's autolayout algorithm for software-architecture diagrams, is now open source under MPL-2.0 and bundled into D2 v0.9.0, following D2's move from an open-core company to a nonprofit project.
This Month in Ladybird – August 2026
Ladybird's August update says the open-source browser project is entirely funded by sponsors and welcomes a new $5,000 sponsor while recapping recent browser-engine and media-source work.
Torvalds joked that AI made Linux 7.3-rc2 this big, and nobody checked
The Next Web reports that Linus Torvalds joked about blaming AI for an unusually large Linux 7.3-rc2 while the kernel already asks contributors to tag machine-assisted patches, leaving maintainers with a measurable but unpublished signal about AI-assisted kernel work.
How to fund an open source project — models that actually work
Cash Raven argues that donations only work for a small number of highly visible maintainers and compares open-core, hosted services, support, training, and other revenue models for funding open-source projects without surprising users or changing project trust.
Coding-agent traces reached 22.20% to 28.66% of a large GitHub sample
BLOGish reports on research finding coding-agent traces across 22% to 29% of a large active-GitHub sample, warning maintainers that the signal shows workflow adoption rather than authorship or productivity and urging projects to track provenance, review paths, tests, defects, reverts, and churn.
Source Licence & Commercial Tool Use | NYTM
NYTM says its source code is now under the NYTM Source Available License v1.1, effective Sept. 5, keeping hosted tools available for client work while limiting reuse of the application's source code and requiring written permission for commercial/source reuse.
Omarchy Patronage is now open to everyone
Omarchy says patronage for the Omacom Foundation is open to all contributors after $13 million in commitments, funding upstream projects including Hyprland, Quickshell, and mise, artists, infrastructure, plugin competitions, and a full-time kernel developer.
Another Comeback, Another Linux Project: Ikey Doherty Introduces Barney
Linuxiac reports that Solus and AerynOS creator Ikey Doherty returned with Barney, an MPL-2.0 Linux build project, amid criticism of Omarchy's heavily funded desktop effort and questions about long-term open-source stewardship.
Keeping Open Source Open in the Age of Coding Agents
Francesco, one of Cua Driver's authors, says two attribution disputes around downstream AI implementations show that coding agents are making open-source provenance harder, and that teams need source tracking, license-notice preservation, and human review before shipping agent-assisted code.
Enclosure by Good Intentions
Leo Gaggl argues that Reticulum's custom license clauses against harmful use and AI training turned the mesh-networking project non-free, fragmented downstream packaging, and would have been better handled through AGPL-style copyleft plus broader governance.
PyCharm & Django Fall Fundraiser
The Django Software Foundation and JetBrains opened their fall PyCharm fundraiser, offering 30% off PyCharm while JetBrains donates a matching amount to support Django Fellows, community programs, and the foundation's push toward a full-time Executive Director.
Relicense BirdNET-Go from CC BY-NC-SA 4.0 to AGPL-3.0
BirdNET-Go is tracking a move from the non-OSI CC BY-NC-SA 4.0 license to AGPL-3.0, saying the change would remove the non-commercial restriction, make packaging easier, and require contributor consent because the project has no CLA.
D2 Is Non-Profit
D2 says the diagramming language is moving from an open-core, for-profit model to an independent non-profit project fiscally sponsored by Hack Club, with donations potentially funding paid contributor contracts.