open-source maintainers

Kernel developer Greg Kroah-Hartman, maintainer of the Linux kernel's stable branch and a central figure in open-source security, has a talk examining software security in the age of large language models. The discussion covers how LLM-generated code and LLM-assisted workflows affect vulnerability handling, code review and trust in the open-source supply chain. It is drawing attention from developers weighing AI's risks and benefits for core infrastructure.

A developer going by vladcodes has released Rhun, an open-source code editor written entirely in assembly language, sharing it with the Hacker News community. The project, available at rhun.app, is drawing attention for the unusual technical decision to build an editor at such a low level, a task most projects handle with higher-level languages. Commenters are likely debating the practicality, performance benefits, and maintainability of assembly-based tooling.

Sentry, the open-source error tracking and performance monitoring platform maintained by Sentry, is seeing fresh attention among developers. The tool helps engineering teams catch, prioritise and fix crashes and performance problems in production software, and its Python-based repository remains a widely used reference project in the monitoring space.

A new vulnerability, EUVD-2026-92803, has been catalogued affecting the docling and docling-slim packages maintained by the docling-project. The flaw carries a moderate severity score of 4.0 out of 10 under CVSS v3.1 and affects versions from 2.91.0 onward. Docling is widely used to parse document formats and connect them with generative AI tools, so affected users are advised to check versions and apply fixes.

The maintainer of novelWriter says they are still building packages for Debian 12 and have noticed people keep downloading them, even though the Debian 12 release reached end-of-life a few months ago. They would like to drop support, which would let them move on from Python 3.11, but are weighing that against users who still rely on those builds.

A profile of the OpenSSH project and its creator is drawing attention across the tech community. OpenSSH underpins secure remote access on virtually every Mac, Linux server and Windows machine, yet is maintained with a deliberately paranoid approach: its code is written to trust no input, no system and no contributor. The piece highlights how this rigour has kept the critical open-source tool safe for decades, prompting discussion about whether other widely used software should adopt similar discipline.

Jarkko Sakkinen, a Linux kernel developer, says he sees no risk in continuing to maintain Landstrip, explaining that he uses the service himself and considers it the best available option. He also criticises GitHub contributors he describes as manager or architect types who arrive with open-ended suggestions such as conformance tests rather than practical contributions.

Search company Kagi has announced it is stopping development of its Orion browser for Linux and will release the Linux version's code as open source. The move means the Linux community will be able to maintain or fork the browser themselves, even as Kagi concentrates Orion's ongoing development on other platforms. Early reaction online is limited so far, with the announcement just beginning to circulate among developers and open-source enthusiasts.

Kagi has announced it is stopping development of its Orion browser for Linux and will instead release the code as open source. The move means Linux users will no longer receive official updates, but the community will be able to maintain and build the browser themselves. Kagi positions the decision as a way to serve Linux users better without continuing costly in-house development.

System76, the Linux hardware and software company, will no longer accept LLM-generated content in pull requests for its COSMIC desktop environment project. The move means code submissions flagged as AI-generated will be rejected. The decision reflects a broader debate in open-source development, where maintainers are increasingly pushing back on low-quality or unreviewable AI-generated contributions flooding their queues.

A maintained fork of ncdu, the NCurses-based disk usage analyser for the command line, is now available on GitHub under rcalixte's account. The project continues the popular terminal tool that lets users inspect and manage disk space interactively, drawing attention from developers interested in open-source command-line utilities.

A software developer has added a continuous integration workflow to their open-source project that automatically rejects pull requests containing commits signed by major AI agents or marked as AI-assisted. The check is shared as a reusable workflow in a separate repository so the blocklists and regex patterns can be updated centrally across projects.