opensource

The Polinrider and Glassworm Supply Chain Offensive: A Forensic Post-Mortem

by

Industrialised Software Ecosystem Subversion and the Weaponisation of Invisible Unicode Executive Summary The early months of 2026 marked a pivotal escalation in the sophistication of software supply chain antagonism, characterised by a coordinated, multi-ecosystem offensive targeting the global development community. Central to this campaign was the Polinrider operation, a sprawling initiative attributed to Democratic People’s … Read more

The Axios Supply Chain Compromise: A Post-Mortem on Infrastructure Trust, Nation-State Proxy Warfare, and the Fragility of Modern JavaScript Ecosystems

by

TL:DR: This is a Developing Situation and I will try to update it as we dissect more. If you’d prefer the remediation protocol directly, you can head to the bottom. In case you want to understand the anatomy of the attack and background, I have made a video that can be a quick explainer. The … Read more

Hidden Threats in PyPI and NPM: What You Need to Know

by

Introduction: Dependency Dangers in the Developer Ecosystem Modern software development is fuelled by open-source packages, ranging from Python (PyPI) and JavaScript (npm) to PHP (phar) and pip modules. These packages have revolutionised development cycles by providing reusable components, thereby accelerating productivity and creating a rich ecosystem for innovation. However, this very reliance comes with a … Read more

Why Did Elastic Decide to Go Open Source Again?

by

Elastic’s Return to Open Source: The Knight is back to the Pavilion Elastic, the company behind Elasticsearch, recently decided to revert to an open-source licensing model after four years of operating under a proprietary license. This decision reflects a shift in strategy that emphasizes community-driven innovation and collaboration. In 2019, Elastic initially adopted a proprietary … Read more

The Fork in the Road: The Curveball that Redis Pitched

by

In a move announced on March 20th, 2024, Redis, the ubiquitous in-memory data store, sent shockwaves through the tech world with a significant shift in its licensing model. Previously boasting a permissive BSD license, Redis transitioned to a dual-license approach, combining the Redis Source Available License (RSAL) and the Server Side Public License (SSPL). This … Read more

Building a Log-Management & Analytics Solution for Your StartUp

by

Building a Log-Management & Analytics Solution for Your StartUp Background: As described in an earlier post, I run the Engineering at an early stage #traveltech #startup called Itilite. So, one of my responsibility is to architect, build and manage the cloud infrastructure for the company. Even though I have had designed/built and maintained the cloud infrastructure … Read more

Open Source Vs Open Governance: The state and Future of Open Source Movement

by

Last week, DataStax announced that it was jettisoning its role in maintaining the Planet Cassandra community resource site, even as the project lead, Jonathan Ellis, made it known that DataStax would be doubling down on its commercial product, rather than Cassandra. Though the DataStax team put a brave face on the changes, the real question … Read more

GitHub Opensources its Load Balancer

by

GitHub will release as open source the GitHub Load Balancer (GLB), its internally developed load balancer. GLB was originally built to accommodate GitHub’s need to serve billions of HTTP, Git, and SSH connections daily. Now the company will release components of GLB via open source, and it will share design details. This is seen as … Read more

GE & Bosch to leverage open source to deliver IoT tools

by

Partnerships that could shape the internet of things for years are being forged just as enterprises fit IoT into their long-term plans. As a vast majority of organisations have included #IoT as part of their strategic plans for the next two to three years. No single vendor can meet the diverse #IoT needs of all customers, so they’re … Read more

GitLab hits back on GitHub with a visual issue tracking board!

by

The startup today introduced an issue tracking feature for its fast-growing code hosting platform that promises to help development teams organize the features, enhancements and other items on their to-do lists more effectively. The GitLab Issue Board is a sleek graphical panel that provides the ability to display tasks as digital note cards and sort … Read more