groundy

open source

27 articles · rss

Top in open source

oss

DuckDB Queries Hugging Face Parquet Files Over HTTP Without Downloads

DuckDB queries Parquet files on Hugging Face Hub over HTTPS without downloading them first, turning dataset triage from a multi-gigabyte commitment into a LIMIT 100 query.

jun 08
oss

Open-Source Workspace Suite tinycld Takes On Google and Nextcloud

TinyCld bundles mail, calendar, drive, docs, and spreadsheets into one self-hosted container. Whether it replaces Google Workspace depends entirely on email deliverability.

jun 01
oss

DARPA's AIxCC Postmortem: What Autonomous Cyber Reasoning Systems Got Right and Wrong

A USENIX Security 2026 SoK paper dissects DARPA's AIxCC cyber reasoning systems, which found 77% of synthetic bugs but proved unusable outside their competition sandboxes.

oss

An Open-Source Home Camera That Encrypts End-to-End Instead of Trusting Ring

Secluso is a GPLv3 camera system that encrypts footage on a Raspberry Pi so the relay server cannot read it. Key management, hosting, and hardware limits fall to the operator.

oss

Your Open-Source License Won't Stop Someone Phishing With Your Code

The Axios attack exposed that permissive licenses grant irrevocable, abuse-blind rights, forcing maintainers to rely on trademark policy and registry takedowns.

oss

An Open-Source 80386 Rebuilt Around Intel's Original Microcode

z386 is an 80386 FPGA core driven by Intel's original microcode ROM, recovered from die photographs. It runs Doom at 16.5 FPS, but the microcode's IP status is unresolved.

oss

Models.dev Turns Scattered AI Model Pricing Into One Open Database

Models.dev aggregates 1,000+ AI model specs into a TOML database with a public JSON API, but one stale price field silently corrupts every downstream cost estimate.

oss

Frontier AI Has Broken Open CTFs: Why Claude Code Now One-Shots Medium Pwn Challenges

Frontier AI agents solve most medium CTF challenges for under $100 in API costs. BSidesSF 2026 saw 16 full-solve teams, up from one. The open CTF format has lost calibration.

more in this beat 1–19 of 19
  1. may 27 oss Audiomass Adds Multitrack to the Browser-Only Open-Source Audio Editor
  2. may 25 oss One Coding Agent Per Kanban Card: Kanbots Stress-Tests Parallel AI Workflow
  3. may 25 oss Microsoft Open-Sources the Earliest Known DOS Source Code: What 1980 Tim Paterson 86-DOS Reveals
  4. may 24 oss Nesbitt's Open Source Death Taxonomy Exposes a Health Score Blind Spot
  5. may 24 oss Colorado SB051 Carves Out Open Source From Age Verification After Maintainer Backlash
  6. may 24 oss Colorado SB26-051 Shields Non-Commercial Open Source by Omission, Not by Design
  7. may 23 oss Files.md Bets on Plain Markdown Folders as the Obsidian Exit Ramp
  8. may 22 oss Nx Console 18.95.0 Compromise Hides a Multi-Stage Credential Stealer in an Orphan Commit
  9. may 17 oss Oppo Open-Sources X-OmniClaw: Edge-Native Android Agent That Runs Vision and OCR On-Device
  10. may 17 oss NVIDIA Open-Sources SANA-WM: 60s 720p Video From One RTX 5090 With Hybrid Linear Attention
  11. may 17 oss BrowserAct Open-Sources Stealth Browser Engine with 93% Token Reduction Claim
  12. may 16 oss Fisker Owners Open-Source the Ocean EV: CAN Bus Maps, Home Assistant, and the Flying Doctors Network
  13. apr 28 oss pgBackRest Is No Longer Maintained: PostgreSQL Backup Alternatives After the Project Stalls
  14. apr 27 oss free-claude-code Routes Claude Code Through NVIDIA NIM and Local Models After Anthropic's CLI Ban
  15. apr 23 oss Inside Rowboat's Knowledge Graph: Why an Obsidian-Compatible Vault Sidesteps Vector DBs for Personal AI Memory
  16. apr 22 oss Hugging Face's Spring 2026 Report: China 41% of Downloads, Industry Share Collapses From 70% to 37%
  17. apr 22 oss Neural Computers From MetaAuto: Video Models Can Replace Shell Interpreters, But Not Stateful Tasks
  18. apr 19 oss GitHub CLI's `gh skill` Command: One Standard to Rule Claude Code, Copilot, Cursor, and Gemini
  19. feb 20 oss Keep Android Open: F-Droid's Fight Against a Locked-Down Mobile Future
about this beat editorial framing

“Open source” stopped being a binary the moment vendors learned to weaponize the label. A model release with a revenue cap is not Apache 2.0. An app whose core is closed but whose plugin API is public is not a community project. A repository archived on Friday and revived on Monday by a sponsor coalition is not the same artifact it was a week earlier. This beat covers the gap between what a license header claims and what the code, the maintainers, and the governance actually permit.

The through-line is durability under pressure. Supply-chain compromises ride into editors through orphan commits and signed-but-malicious packages. Health dashboards miss the bot-maintained zombies and the burned-out solo committers. Owners of bankrupt vendors reverse-engineer CAN buses and cloud APIs to keep their hardware alive. Regulators draft age-verification and platform-distribution rules that exempt non-commercial code by accident rather than design, and the carve-outs hold only until someone tests them in court. Each story is a stress test on the assumption that “the code is out there” is enough.

We cover open-weight model drops, self-hostable alternatives to closed SaaS, license arbitrage, packaging-ecosystem attacks, and the policy fights that decide which licenses survive contact with commercial reality — but always with the same question underneath: if the upstream walks away tomorrow, what do you actually own?