#Open Source

npm Breaks Its Oldest Promise to Kill the Worm

GitHub's new defaults across npm and Actions attack every stage of the self-replicating supply chain playbook.

Article · 2w ago4

Reflex's XY Wins by Not Drawing Your Data

The new Python charting library's GPU pitch hides the real trick: screen-space aggregation in Rust.

Article · 2w ago0

OpenAI Open-Sourced Codex Security, Not Its Brain

The Apache-2.0 CLI drops agentic vulnerability scanning into any pipeline, with OpenAI's hosted models doing the thinking.

Article · 2w ago5

FeyNoBg's Best Part Isn't the Model

The Apache-2.0 training library matters more than the non-commercial weights it ships with.

Article · 2w ago0

htmx 4.0 Ships on Game Boy Before It Ships on npm

The cartridge is a real playable game, and the rewrite it's teasing deserves more attention than the meme.

Article · 2w ago0

A Solo Dev Squeezed Usable TTS Into 9.36M Parameters

Inflect-Micro-v2 isn't the breakthrough its headline implies, but it resets the floor for offline speech on cheap CPUs.

Article · 2w ago2

Kimi Code and the CLI Agent Land Grab

Moonshot's rewritten terminal agent is open source, single-binary, and priced to undercut the frontier labs.

Article · 2w ago1

Alibaba's AI Code Reviewer Gets the Architecture Right

The hybrid deterministic-plus-agent harness is the real contribution; the precision claims deserve your skepticism.

Article · 2w ago5

Cruller Picks Up the Zig Runtime Bun Left Behind

A solo fork of Bun's last Zig release tests who inherits big codebases in the age of AI rewrites.

Article · 2w ago2

Why a Windows 98 CSS File Keeps Topping Hacker News

Four front-page runs in six years — 98.css endures because it's a real design system, not a gag.

Article · 2w ago5

Your AI Agent Shouldn't Know Your API Keys

OneCLI injects real credentials at the proxy, so a prompt-injected agent has nothing worth stealing.

Article · 3w ago6

Dorsey's Buzz Gives AI Agents Their Own Keys

Forget the Slack-killer framing; the per-agent cryptographic identity model is what the rest of the industry will copy.

Article · 3w ago0

Dorsey's Buzz Gives AI Agents Keys, Not Bot Tokens

Block's open-source workspace fuses chat, Git, and agents into one signed Nostr relay — right primitives, risky bundle.

Article · 3w ago0

Kimi Code Opens the Whole Coding-Agent Stack

Open harnesses are table stakes now. Moonshot's real leverage is open weights and commodity token pricing.

Article · 3w ago2

Jelly UI's Real Trick Isn't the Physics

The wobbly Web Components demo hides a reference-grade implementation of form-associated custom elements.

Article · 3w ago0