Tag: maintainers
-
Hacker News: OpenAUTH: Universal, standards-based auth provider
Source URL: https://openauth.js.org/ Source: Hacker News Title: OpenAUTH: Universal, standards-based auth provider Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses OpenAuth, an open-source centralized authentication server designed for easy self-hosting on user infrastructure. Unlike conventional library solutions, OpenAuth is compliant with OAuth 2.0, allowing for integration across various applications. It provides…
-
Cloud Blog: The 10 top Kubernetes Podcast episodes of 2024
Source URL: https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-podcast-top-episodes-of-2024/ Source: Cloud Blog Title: The 10 top Kubernetes Podcast episodes of 2024 Feedly Summary: Here at the Kubernetes Podcast, we’ve been bringing you news and interviews from the Kubernetes and Cloud-Native technology space since 2019. And this year, Kubernetes turned 10 years old. We celebrated the milestone by focusing on open-source maintainers,…
-
Slashdot: Open Source Maintainers Are Drowning in Junk Bug Reports Written By AI
Source URL: https://developers.slashdot.org/story/24/12/10/2334221/open-source-maintainers-are-drowning-in-junk-bug-reports-written-by-ai?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Open Source Maintainers Are Drowning in Junk Bug Reports Written By AI Feedly Summary: AI Summary and Description: Yes **Summary:** The report highlights the rising prevalence of low-quality security vulnerability submissions generated by AI models in open-source projects, which poses significant challenges for developers. Seth Larson from the Python…
-
The Register: Open source maintainers are drowning in junk bug reports written by AI
Source URL: https://www.theregister.com/2024/12/10/ai_slop_bug_reports/ Source: The Register Title: Open source maintainers are drowning in junk bug reports written by AI Feedly Summary: Python security developer-in-residence decries use of bots that ‘cannot understand code’ Software vulnerability submissions generated by AI models have ushered in a “new era of slop security reports for open source" – and the…
-
Slashdot: GitHub Announces New Open Source Fund with Security Mentoring
Source URL: https://news.slashdot.org/story/24/11/24/0414244/github-announces-new-open-source-fund-with-security-mentoring?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: GitHub Announces New Open Source Fund with Security Mentoring Feedly Summary: AI Summary and Description: Yes Summary: The GitHub Secure Open Source Fund has been launched with a commitment of $1.25 million to support open-source projects. This initiative aims to provide funding and mentorship to maintainers of critical software,…
-
Hacker News: Attestations: A new generation of signatures on PyPI
Source URL: https://blog.trailofbits.com/2024/11/14/attestations-a-new-generation-of-signatures-on-pypi/ Source: Hacker News Title: Attestations: A new generation of signatures on PyPI Feedly Summary: Comments AI Summary and Description: Yes Summary: The announcement discusses a new security feature on the Python Package Index (PyPI): index-hosted digital attestations based on PEP 740. This feature enhances package provenance and security by integrating with Trusted…
-
Simon Willison’s Weblog: PyPI now supports digital attestations
Source URL: https://simonwillison.net/2024/Nov/14/pypi-digital-attestations/#atom-everything Source: Simon Willison’s Weblog Title: PyPI now supports digital attestations Feedly Summary: PyPI now supports digital attestations Dustin Ingram: PyPI package maintainers can now publish signed digital attestations when publishing, in order to further increase trust in the supply-chain security of their projects. Additionally, a new API is available for consumers and…
-
Hacker News: PyPI now supports digital attestations
Source URL: https://blog.pypi.org/posts/2024-11-14-pypi-now-supports-digital-attestations/ Source: Hacker News Title: PyPI now supports digital attestations Feedly Summary: Comments AI Summary and Description: Yes Summary: PyPI has introduced support for digital attestations, enhancing supply-chain security for Python package maintainers. This update, part of PEP 740, allows maintainers to publish signed attestations associated with their projects, ensuring higher trust and…