Popular：
Virtualization DNS security formal verification reachability analysis compiler errors macro conflict web extension development framework Bitmap Graphics API inconsistencies All Tags

Category: Development

Shocking! Most Open Source Projects Are Maintained by a Single Person

2025-08-28
Shocking! Most Open Source Projects Are Maintained by a Single Person

A recent article reveals a shocking truth about the open-source world: over 7 million open-source projects are maintained by just one person! This includes many popular NPM packages with over a million downloads. The author argues that focusing on the maintainer's nationality is pointless; the real issue is that these developers severely lack resources and support, posing a potential supply chain risk. Instead of demonizing individual developers, we should focus on how to better support them.

(opensourcesecurity.io)
Development single maintainer

A Fast Bytecode VM for Arithmetic (Part 2): Compiler and Decompiler in Haskell

2025-08-28
A Fast Bytecode VM for Arithmetic (Part 2): Compiler and Decompiler in Haskell

This post, the second in a series, details a compiler and decompiler for a fast bytecode virtual machine for arithmetic expressions in Haskell. It explains why bytecode is faster than AST interpretation, designs a stack-based bytecode virtual machine, and outlines bytecode instructions for Num, BinOp, Var, and Let AST nodes. The compiler uses pre-allocated byte arrays and pointer manipulation for performance, with robust error handling. Performance benchmarks comparing various data structures and control flow are presented. Finally, a decompiler is implemented to aid debugging and testing.

(abhinavsarkar.net)
Development

The Forecasting Company: Seeking Founding Software Engineer

2025-08-28
The Forecasting Company: Seeking Founding Software Engineer

A startup building the ultimate forecasting foundation model is seeking a founding software engineer. This full-stack role involves developing customer-facing APIs, robust data pipelines, and a web application. Ideal candidates will be proficient in Python and TypeScript, comfortable with React, and have experience building projects from scratch. Benefits include generous equity, daily lunch vouchers, an on-site gym, a mobility pass, full health insurance, and more.

(www.ycombinator.com)
Development Forecasting Model

Lago: Open-Source SaaS Billing Platform Raises $22M, Boasts 7000+ GitHub Stars

2025-08-28
Lago: Open-Source SaaS Billing Platform Raises $22M, Boasts 7000+ GitHub Stars

Lago is an open-source billing platform simplifying, clarifying, and adapting SaaS billing for companies. Having raised over $22 million in funding from top-tier investors, Lago boasts over 7,000 GitHub stars, highlighting a strong developer community and technical prowess. Next-gen companies like Mistral.ai, Together.ai, Groq, and Laravel utilize Lago for their billing needs. The Lago team comprises ambitious, focused individuals dedicated to solving challenging problems with excellence and accountability, fostering a culture of rapid iteration and learning from mistakes.

(www.ycombinator.com)
Development Billing Platform

Incus: System Containers vs. Virtual Machines – A Deep Dive

2025-08-28
Incus: System Containers vs. Virtual Machines – A Deep Dive

Incus supports two instance types: system containers and virtual machines. System containers leverage Linux kernel features for isolation, are Linux-only, and consume fewer resources. Virtual machines use hardware virtualization for isolation, allowing different operating systems but consuming more resources. Application containers (like Docker) package single applications, while system containers simulate a full OS, suitable for multiple applications and creating separate user spaces. Choose system containers for better performance and smaller size if all functionality is compatible with the host kernel; otherwise, use virtual machines.

(linuxcontainers.org)
Development

Revisited Forth: Two Implementations and Reflections on a Quirky Language

2025-08-28

The author revisited Forth, a language first encountered 20 years ago. Over two months, they implemented two Forth interpreters: goforth (in Go) and ctil (in C). goforth, a pure interpreter, is simple but lacks advanced features. ctil, closer to a traditional Forth implementation, allows extending the language using Forth itself, showcasing its power. The author argues that Forth's unique strengths lay in its early hardware context. However, its stack-based model makes it less readable and less practical in modern contexts, best suited as a learning project to understand compiler principles and virtual machines.

(eli.thegreenplace.net)
Development Language Implementation Compiler Principles

Cactoide: Effortless Event Management

2025-08-28
Cactoide: Effortless Event Management

Cactoide is a mobile-first event RSVP platform that lets you create events, share unique URLs, and collect RSVPs without any registration. Features include instant event creation, one-click sharing, all-in-one clarity, no sign-ups required, smart limits, and effortless simplicity. Designed to streamline coordination and make events vibrant and unforgettable. The project is open-source with detailed setup instructions.

(github.com)
Development

bookmarks.txt: A Simple, Text-Based Bookmark Manager

2025-08-28
bookmarks.txt: A Simple, Text-Based Bookmark Manager

bookmarks.txt offers a streamlined approach to bookmark management using plain text files. Bookmarked URLs are stored in files named bookmarks.txt, with a simple format: one URL per line, optionally including a title (space-separated). A global bookmarks file resides at $HOME/bookmarks.txt, while project-specific bookmarks can be stored in local bookmarks.txt files. The project includes a script, bin/bookmarks, for listing and adding bookmarks, but building custom tools is also encouraged. Combined with fzf, it provides a powerful fuzzy search and open functionality. This lightweight, customizable solution prioritizes simplicity and extensibility.

(github.com)
Development bookmark management

Bitnami's Docker Hub Migration: Security Upgrade or Paywall?

2025-08-28
Bitnami's Docker Hub Migration: Security Upgrade or Paywall?

Bitnami is migrating its public Docker image repository to a new Bitnami Legacy repository and gradually rolling out the more secure Bitnami Secure Images (BSI). The migration will be phased, with temporary image service interruptions. Users can choose to migrate to BSI (partially free, but full functionality requires a paid subscription) or the Bitnami Legacy repository (temporary solution, with security risks). Bitnami explains this move as an effort to improve security and address the growing threat of open-source software vulnerabilities and new regulations. However, this move has also sparked controversy, with some arguing it's a strategy to shift from free to paid services.

(community.broadcom.com)
Development

Malicious nx Packages on npm: Credential Theft and System Shutdown

2025-08-27
Malicious nx Packages on npm: Credential Theft and System Shutdown

Multiple versions of the npm package 'nx' (including 21.5.0, 20.9.0, etc.) were maliciously compromised. An attacker used a stolen npm token to publish packages containing code that scans the user's file system, collects credentials (GitHub, system passwords, etc.), and uploads this information to a GitHub repository under the user's account. The malicious code also modifies the user's `.zshrc` and `.bashrc` files to execute `sudo shutdown -h 0` upon terminal launch, potentially shutting down the system. Affected users should immediately update their 'nx' package to the latest version and check their GitHub for compromised repositories. Nx has removed the malicious packages and implemented enhanced security measures, including mandatory 2FA and the new Trusted Publisher mechanism for all npm packages.

(github.com)
Development

C++-style OOP in C: Kernel Services via Function Pointers

2025-08-27
C++-style OOP in C: Kernel Services via Function Pointers

This article details how the author implemented a virtual table (vtable) mechanism in their operating system kernel using C's function pointers and structs, mimicking object-oriented programming. This approach enables unified management of kernel services like starting, stopping, and restarting, and allows for flexible scheduling policy changes without extensive code modification. The author explains the implementation and application of vtables with examples of device drivers and service management, discussing the advantages and disadvantages. While the C syntax leads to slightly verbose code, this method enhances readability and maintainability, improving kernel flexibility and extensibility.

(oshub.org)
Development

Delphi TensorFlow Lite Image Classifier

2025-08-27
Delphi TensorFlow Lite Image Classifier

This Delphi code implements a simple TensorFlow Lite image classifier. It loads a model file, preprocesses image data from an Image1 component, and feeds the data to a TensorFlow Lite interpreter for inference. The inference results, probabilities for each class, are displayed in a ListView1 component. The code includes error handling and resource release mechanisms for stability.

(learndelphi.org)
Development Image Classification

Urgent: Malicious nx Build Kit Steals GitHub Keys

2025-08-27
Urgent: Malicious nx Build Kit Steals GitHub Keys

A malicious post-install command in the popular nx build kit has been discovered, creating a repository prefixed with 's1ngularity-repository' on affected users' GitHub accounts. This malware steals wallets, API keys, and environment variables, storing them in a base64-encoded file. Cleverly, it leverages LLMs like Claude Code CLI or Gemini CLI to offload much of its fingerprintable code to a prompt, making detection harder. Impacted versions of nx have been removed from npm. Users should immediately check their GitHub accounts, update nx to the latest safe version, and rotate any compromised secrets.

(semgrep.dev)
Development nx build kit github security

Intentionally Slowing Down Programs: A Surprising Boost to Developer Tool Accuracy

2025-08-27
Intentionally Slowing Down Programs: A Surprising Boost to Developer Tool Accuracy

Most research on programming language performance focuses on speeding up programs, but a new study explores the benefits of intentionally slowing them down. By inserting NOP or MOV instructions into program basic blocks, researchers achieved fine-grained control over program execution, leading to more precise race condition detection, speedup simulation, and profiler accuracy assessment. Experiments on an Intel Core i5-10600 showed that NOP and MOV instructions are best suited for this purpose, opening new avenues for future advanced developer tooling.

(stefan-marr.de)
Development profilers

QEMU 10.1 Released: Enhanced Architecture Support and Performance Improvements

2025-08-27

QEMU 10.1 is out, boasting enhanced support for multiple architectures including RISC-V, Arm, and x86, alongside significant performance improvements. New instruction set support (SME2, SVE2, etc.) has been added, along with new board models and virtualization features. Existing functionalities have also seen upgrades, such as improved floating-point exception emulation, optimized block device operations, and network performance boosts. Notably, Rust support has been enhanced but remains experimental.

(wiki.qemu.org)
Development System Emulation

Monodraw: System Requirements and FAQs

2025-08-27

Monodraw requires macOS 11 Big Sur or later. Older macOS versions can use v1.3 (macOS 10.10 Yosemite) or v1.5 (macOS 10.14 Mojave). The command-line tool is only included in versions downloaded directly from our website and purchased from our store due to App Store sandbox restrictions. Feedback can be sent via email or tweet @Monodraw. Your email address will not be shared with third parties; it's only used for important updates and product news. A press kit is available for download, and educational pricing is offered. Monodraw does not collect any user data.

(monodraw.helftone.com)
Development

FilterQL: A Tiny Query Language for Filtering Structured Data

2025-08-27
FilterQL: A Tiny Query Language for Filtering Structured Data

FilterQL is a lightweight query language for filtering structured data. It consists of a TypeScript library and a language specification, with implementations in other languages welcome. Users define a schema for their data and then use a concise syntax to filter, sort, and limit results, such as `genre == Action` or `year >= 2008 && rating >= 8.5 | SORT rating desc`. FilterQL supports a variety of comparison and logical operators, and allows for custom operations to extend its capabilities. It's perfect for building CLIs or other tools needing flexible data filtering.

(github.com)
Development typescript

In the AI Era, Adaptable Tools Will Win

2025-08-27
In the AI Era, Adaptable Tools Will Win

In the age of AI, success hinges not on adapting to tools, but on tools adapting to you. The article contrasts Linear, a rigid tool, with Fibery, a flexible one, illustrating their diverging fates. Linear's inflexibility limits AI integration, while Fibery leverages LLMs to transform complex setups into simple prompts. LLMs shift the focus from solution design to problem definition; users describe needs in natural language, and AI handles the implementation. This highlights the power of malleable software, where configuration becomes fast and easy, allowing users to adapt to evolving needs, while rigid tools fall behind. The article predicts that malleable software will gradually replace rigid counterparts in the coming years, becoming the dominant paradigm.

(www.mdubakov.me)
Development Malleable Software

Elegant Retry Loops: Avoiding Redundancy and Unexpected Sleeps

2025-08-27

The author explores writing an elegant retry loop that clearly bounds the number of retries, avoids spurious sleep after the last attempt, reports the original error if retrying fails, and avoids code duplication. Several approaches are compared, ultimately settling on a `try while` loop with an upper bound to guarantee termination, addressing boundary issues and potential runaway loops in previous solutions. While the final solution isn't perfect, it represents a significant improvement in brevity and robustness over previous attempts.

(matklad.github.io)
Development

Async: AI-Powered Collaborative Coding Workflow

2025-08-27
Async: AI-Powered Collaborative Coding Workflow

Async is an open-source developer tool that combines AI coding, task management, and code review into one streamlined workflow. Integrating Claude Code, Linear, and GitHub PRs, it automatically researches coding tasks, executes code changes in the cloud, and breaks work into reviewable subtasks, handling the entire workflow from GitHub issue to merged PR. Async excels with mature codebases, enforcing upfront planning, eliminating context switching, simplifying task tracking, and providing built-in code review. Built with FastAPI, Claude Code, and Google Cloud Platform, it supports desktop and mobile.

(github.com)
Development

LiteLLM: Hiring Founding Full-Stack Engineer

2025-08-27
LiteLLM: Hiring Founding Full-Stack Engineer

LiteLLM, an open-source LLM gateway with 27K+ GitHub stars used by companies like NASA and Adobe, is rapidly expanding and seeking a founding full-stack engineer. The role focuses on unifying the format for calling 100+ LLM APIs (OpenAI, Azure, Bedrock, etc.) using the OpenAI spec, improving platform performance and reliability. The tech stack includes Python, FastAPI, JS/TS, Redis, Postgres, and more. Candidates should have 1-2 years of backend or full-stack experience, be comfortable maintaining high-performance infrastructure, and passionate about open-source.

(www.ycombinator.com)
Development

spaCy 3.8 Released: Powering Up Industrial-Strength NLP

2025-08-27
spaCy 3.8 Released: Powering Up Industrial-Strength NLP

spaCy 3.8 is out! This advanced Natural Language Processing library for Python and Cython is built on cutting-edge research and designed for real-world applications. Supporting tokenization and training for 70+ languages, it boasts state-of-the-art speed and neural network models for tasks like NER, text classification, and more. It features multi-task learning with pretrained transformers like BERT, a production-ready training system, and easy model packaging, deployment, and workflow management. Check the release notes for details on improvements.

(github.com)
Development

Regolith: A Linear-Time Regex Library Preventing ReDoS Attacks

2025-08-27
Regolith: A Linear-Time Regex Library Preventing ReDoS Attacks

Regolith is a server-side TypeScript and JavaScript library built with Rust to prevent Regular Expression Denial of Service (ReDoS) attacks using a linear regex engine. Unlike the default RegExp in TypeScript and JavaScript (which has exponential worst-case time complexity), Regolith boasts linear worst-case complexity, effectively mitigating ReDoS vulnerabilities. Designed as a drop-in replacement for RegExp, it minimizes migration effort, allowing developers to easily build ReDoS-resistant software. Still early in development, Regolith welcomes community contributions.

(github.com)
Development Regular Expression

rv: A Revolutionary Ruby Language Manager

2025-08-27

After a decade of working on Bundler, the author has finally created rv, a new kind of Ruby management tool. rv not only manages gem dependencies but also Ruby versions, installing pre-compiled Rubies to eliminate lengthy compilation times. More importantly, rv makes running any Ruby script or tool trivial, even if it requires a different Ruby version. Inspired by uv (a similar tool for Python), cargo, and npm, rv boasts speed, reliability, and innovative features like `rv tool run` and `rv tool install`, simplifying Ruby environment management and dramatically boosting developer productivity.

(andre.arko.net)
Development

Artanis: A Guile-based Web Framework Born from a Hackathon

2025-08-27

Artanis is a web framework written in GNU Guile. Its creation stemmed from an internal GNU discussion about website development languages. The author proposed using Guile, and received approval from RMS. Later, during a Guile community hackathon, Artanis was officially launched and developed.

(artanis.dev)
Development

20x Faster PostgreSQL Hash Partitioning: Bypassing Catalog Lookups

2025-08-27
20x Faster PostgreSQL Hash Partitioning: Bypassing Catalog Lookups

PostgreSQL's hash partitioning incurs catalog lookup overhead in high-throughput applications. This article presents an optimization technique that bypasses PostgreSQL's catalog lookups by pre-calculating partition indices in the application layer. Using the Ruby gem `pg_hash_func` or directly calling PostgreSQL's hash functions can speed up queries by more than 20 times, significantly reducing latency. This approach is suitable for performance-critical scenarios and offers more choices in balancing simplicity and performance.

(www.shayon.dev)
Development Hash Partitioning

Reverse Engineering Apple's M1 GPU: Open-Source Drivers Make Linux Gaming Soar

2025-08-27

Beginning in 2020, Hector Martin, a University of Toronto computer science student, launched the Asahi Linux project to bring Linux to Apple's M1 chip. Collaborating with an engineer at Collabora, he reverse-engineered the M1's GPU, gradually achieving graphics acceleration and ultimately achieving full support for OpenGL 4.6, Vulkan 1.4, and OpenCL 3.0, enabling Proton gaming. This not only debunked the myth that Vulkan is unsuitable for Apple hardware but also contributed a high-quality driver to the open-source community, dramatically improving the Linux gaming experience on the M1 chip.

(rosenzweig.io)
Development Open Source Driver

Uncomfortable Truths About Google's Android Developer Verification

2025-08-27

This blog post raises serious concerns about Google's upcoming Android developer verification program. Using the example of the ICEBlock app developer, who faced threats after revealing their identity, the post argues the program could harm developers needing anonymity. Five key questions are posed: How will legitimate needs for developer anonymity be addressed? Which civil society organizations were consulted, and what were the results? How should Google's privacy policy regarding sharing personal information be interpreted? How will the program handle debug keystores and duplicate package names commonly used in app development? What are the implications for those learning Android development? The post urges Google to engage in discussions and provides a feedback form.

(commonsware.com)
Development

arXivLabs: Community Collaboration on arXiv Feature Development

2025-08-26
arXivLabs: Community Collaboration on arXiv Feature Development

arXivLabs is a new collaborative framework enabling developers to build and share new arXiv features directly on the arXiv website. Individuals and organizations participating in arXivLabs embrace arXiv's values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners who share them. Got an idea for a project that will benefit the arXiv community? Learn more about arXivLabs!

(arxiv.org)
Development
1 2 3 4 5 7 9 10 11 … 201 202