Communities get the Slack they tolerate. Most Slack friction in large communities is not scam or clear CoC abuse. It is attention tax: wrong channel, wrong reply surface, untrimmed unfurls, and habits...

Maintainer, mentor, then manager -- and when personal sponsorship bridges the gap so strong contributors keep shipping before a formal program says yes.

security.txt lives at a well-known URI and costs almost nothing -- yet adoption is uneven. What good-enough looks like, live examples, and the file this site ships.

GSoC 2026 work is mostly marked complete. A personal 50 from orgs like Apache, Debian, Django, Git, Linux Foundation, OWASP, and PSF, org volume, and a hope that 2027 still happens.

OWASP Juice Shop leadership changes & contributor recognition on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

Analysis of a package targeted by a supply-chain attack to the build and release process

Release of Supply-Chain Firewall, an open source tool for preventing the installation of malicious PyPI and npm packages

Through the weak package, you can create these special pointers that automatically become nil when their target memory gets collected. While they’re a bit trickier to use than regular pointers, they’r...

Open World Holidays Framework. Contribute to vacanza/holidays development by creating an account on GitHub.

Here's how to verify your Bluesky account by setting your website as your username.

Applications for the new GitHub Secure Open Source Fund are now open! Applications will be reviewed on a rolling basis until they close on January 7 at 11:59 pm PT. Programming and funding will begin ...

Announcing support for PEP 740 on the Python Package Index