Open {re}Source

Open {re}Source

@openresource.dev

Open source, {re}explained. How it works, how to contribute, how to run your own project. A free guide, articles and a showcase at openresource.dev, by @deramond.dev.

1.8K followers1K following321 posts

Open {re}Source
@openresource.dev

Since October 8, 2026, Anthropic's OSS Scanner runs free, periodic vulnerability scans on critical open source projects. Maintainers opt in with a PR. Reports reach you with no human triage. anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source

anthropic.comAn opt-in vulnerability-finding service for open-source softwareWe’re launching OSS Scanner, an opt-in vulnerability scanner for the open-source ecosystem informed by our experience using Claude to find vulnerabilities during Project Glasswing. Projects that join ...

Open {re}Source reposted

Sindre Sorhus
@sindresorhus.com

Due to AI, I have disabled external pull requests on all my repos. Open source, as we have known it, was fun while it lasted. (It’s been 15 years for me) I will still maintain projects and handle issues.

Open {re}Source
@openresource.dev

Git was built for offline humans. Anthropic's clients are agents: 30,000+ merges a day in September 2026. So they rebuilt source control in-house: Scion replaces Git, Antique does code review. The ideas are meant for Git, GitHub and GitLab. anthropic.com/engineering/redesigning-source-control

anthropic.comRedesigning source control at AnthropicAs our merges per day grew more than tenfold, source control became our biggest development bottleneck. Here, we share how we migrated to an in-house version control system in five months.

Open {re}Source reposted

Syntax
@syntax.fm

We have $100K to give away to open source maintainers! Let us know your suggestions and nominations.

Open {re}Source
@openresource.dev

GitHub trick: to sort an issue search by 👍, add sort:reactions-+1-desc On VS Code, the top one is a 2015 request to change the workbench font: 3,783 👍. Works across GitHub, with any reaction. So react with 👍 instead of commenting "+1": only reactions count.

Open {re}Source
@openresource.dev

Open {re}Source has a new look: its own mark and palette, on the same design system as the other products and tools I publish. How I did the whole rebrand in eight days 👇

Julien Déramond@deramond.dev

I rebranded everything I publish (site, docs, slides, socials) in eight days, on spare time, with Claude and a private repo. Not a designer: Claude did the visuals, I was a human colour picker. Then tokens, 4 npm packages, ~80 PRs. deramond.dev/blog/rebrand...

deramond.devRebranding everything I publish in eight days, with Claude and a private repoMy website, tool docs, Storybooks, slides, READMEs and social accounts now share one identity. How a private branding repository, a written backlog and Claude as a design partner got it done on spare ...
Open {re}Source
@openresource.dev

hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit So Far

stepsecurity.iohackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit So Far - StepSecurityA week-long automated attack campaign targeted CI/CD pipelines across major open source repositories, achieving remote code execution in at least 4 out of 5 targets. The attacker, an autonomous bot ca...
Open {re}Source
@openresource.dev

A short article explaining how to run a local AI model inside Obsidian using Ollama. If you try out this setup, let me know how it goes! Share your experiences, tips, or custom workflows. Happy note-taking! #obsidian #ollama #OSS #OpenSource

openresource.devRunning a Local AI Inside Obsidian with OllamaLearn to set up Ollama with Obsidian for a completely local AI writing assistant. Step-by-step guide to private, offline AI that works with your notes without sending data to the cloud.

Open {re}Source reposted

Open Source Wishlist
@oss-wishlist.bsky.social

Open Source Wishlist is an open source, open content platform where maintainers can express specific sustainability needs, and the ecosystem can discover, contribute to, and fund solutions for those risks. sunnydeveloper.com/open-source-...

sunnydeveloper.comOpen Source Wishlist: Community Infrastructure for OSS SustainabilityDespite countless calls for open source sustainability, there's still no clear pathway for maintainers to express needs and receive help. In my personal time, I've built a working proposal for how th...
Open {re}Source
@openresource.dev

🧵A thread of November 2025 events related to Open Source (excluding those dedicated to specific stacks or frameworks), including dates, locations, URLs, and social media links!

View full thread
Open {re}Source
@openresource.dev

🧵A thread of November 2025 events related to Open Source (excluding those dedicated to specific stacks or frameworks), including dates, locations, URLs, and social media links!

View full thread
Open {re}Source
@openresource.dev

🧵A thread of November 2025 events related to Open Source (excluding those dedicated to specific stacks or frameworks), including dates, locations, URLs, and social media links!

View full thread
Open {re}Source
@openresource.dev

🧵A thread of November 2025 events related to Open Source (excluding those dedicated to specific stacks or frameworks), including dates, locations, URLs, and social media links!

View full thread
Open {re}Source
@openresource.dev

🧵A thread of November 2025 events related to Open Source (excluding those dedicated to specific stacks or frameworks), including dates, locations, URLs, and social media links!

View full thread
Open {re}Source
@openresource.dev

🧵A thread of November 2025 events related to Open Source (excluding those dedicated to specific stacks or frameworks), including dates, locations, URLs, and social media links!

Open {re}Source
@openresource.dev

12 years of PostCSS → 400M+ downloads/month. Lessons from the journey: collaborate early with other maintainers, keep libraries build-free for easier debugging, and focus on simplicity. Great read on OSS longevity 🌟 #OpenSource evilmartians.com/chronicles/w...

evilmartians.comWhat we learned from creating PostCSS—Martian Chronicles, Evil Martians’ team blogWe share what have we learned creating PostCSS and the huge ecosystem around it. Get 8 key lessons from Andrey Sitnik, creator of PostCSS.

Open {re}Source reposted

Julien Déramond
@deramond.dev

🚀 Excited to share that my talk “Design Systems: Inner & Open Source Strategies” has been accepted at Open Source Experience this December! 🇫🇷 #OSXP2025 🎉 It’ll be in French, and I’ve got 20 minutes, so it’s going to be intense! 👉 Any specific aspects you’d like me to cover?

Open {re}Source reposted

Martin Costello 🏳️‍🌈🇪🇺🪿
@martincostello.com

Looks like eslint-plugin-prettier and eslint-config-prettier might have been compromised 😬 github.com/prettier/esl...

github.comfour new versions published with no code changes to repo · Issue #339 · prettier/eslint-config-prettierThe diff looks a little odd: https://npmdiff.dev/eslint-config-prettier/10.1.5/10.1.7 Is this expected? https://www.npmjs.com/package/eslint-config-prettier?activeTab=versions
View full thread