open-source software

The Dutch government is developing an alternative to Microsoft's software ecosystem, built on NixOS, a Linux distribution known for its reproducible and declarative configuration. The project, referred to as DAWO, is aimed at reducing dependence on American software vendors. The move is drawing attention as part of a broader European push for digital sovereignty and open-source adoption in public administration.

Nvidia has introduced an open-source platform designed to make AI agents safer to deploy, giving developers tools to test and guard against unsafe behaviour. The move, reported by SC Media, positions Nvidia alongside other major tech firms racing to address security and reliability concerns as autonomous AI systems spread across enterprise software.

GitHub says it discovered 24 vulnerabilities in Android using its open-source AI security agent, describing it as automated vulnerability discovery at scale on real production software. The company published details in a blog post, and the report is drawing attention as a notable demonstration of AI agents doing practical security research on widely used code.

Nvidia has released a new open-source framework aimed at improving the security of artificial intelligence systems. The tool is intended to help developers identify and address vulnerabilities in AI applications. Details about the framework's features, supported platforms, and initial adoption remain limited, but the move aligns with the broader industry push toward safer and more transparent AI development practices.

CodeSupply has announced a new research and development grant programme focused on open-source software security. The grants are intended to fund work that improves the safety and resilience of widely used open-source projects, a growing concern following high-profile supply chain vulnerabilities. Details on eligibility, funding amounts and deadlines have not yet been widely reported.

GrapheneOS, the privacy-focused Android operating system long limited to Google Pixel devices, has selected the Motorola Signature 27 as its first officially supported phone made by another manufacturer. The move expands hardware choices for users seeking hardened security without buying a Pixel, and is drawing attention from security and open-source communities discussing what it means for the project's future and Motorola's software support.

The Dutch government has chosen NixOS, a configurable Linux distribution, as the basis for a sovereign desktop strategy, aiming to reduce dependence on foreign software vendors such as Microsoft. The move aligns the Netherlands with a broader European push toward open-source digital autonomy. Technology observers see it as a notable endorsement of NixOS, which is less commonly used at government scale.

The Clop ransomware gang has moved to new server infrastructure after exploiting a vulnerability in Grav CMS, the open-source flat-file content management system. The extortion group, known for large-scale data-theft campaigns against corporations and government agencies, is continuing operations despite the disruption. Security teams are being urged to patch Grav CMS installations and review whether their systems were targeted.

The developer behind F-Droid, the open-source Android app repository, is publicly asking how the EU's proposed KIDS Act would affect free and open-source software. He notes the proposal does not appear to directly regulate projects like F-Droid, but reports hearing it might, raising concerns among free software advocates about age-verification rules covering app distribution.

Anthropic has acquired Stainless, the developer tooling company behind a popular SDK generator, and has shut down the generator service. In response, Cloudflare has open-sourced Forge, its own alternative for generating software development kits. Developers who relied on Stainless are now weighing Cloudflare's Forge as a replacement, sparking discussion about tooling ownership and the future of open-source SDK generation.

Manifest has joined Chainguard's Athena Coalition, an initiative aimed at identifying open-source software risk inside commercial software products. The announcement was carried by Business Wire and picked up by outlets including Yahoo Finance. The coalition brings companies together to improve visibility into the open-source components embedded in software supply chains, a growing concern after a series of high-profile supply chain attacks.

The Netherlands is developing an open-source desktop work environment for government authorities, built on the NixOS operating system as part of a push for digital sovereignty. Eight municipalities are already testing the system, which aims to reduce dependence on commercial software vendors for public administration IT.

The VLC media player has released version 3.0.24, which patches more than 130 security vulnerabilities. The update is drawing attention on security and open-source forums, with users urging others to install it promptly as part of the latest patch wave. VLC is one of the world's most widely used media players, so the scale of the fix list makes the release notable for both private users and administrators.

The open-source Shotcut video editor has released version 26.9, bringing improvements to the VA-API HEVC hardware encoder on Linux and adding support for FFmpeg 9. Linux and open-source communities are sharing the update, which should appeal to users doing hardware-accelerated video encoding on free software platforms.

Prividium has released the core engine of its platform as open source, following its first live deployment. The move means developers and organisations can now inspect, use and build on the underlying code themselves. Details beyond the announcement, including the engine's exact function and where it was first deployed, remain limited.

The GNU Debugger project has released version 18.1, the latest update to the widely used open-source debugging tool for C, C++ and other languages. The announcement was posted to the GDB mailing list, and developers are discussing the new release and what it includes.

The Document Foundation, the non-profit behind LibreOffice, published a blog post arguing that the absence of AI features is itself a selling point. The piece pushes back against the industry trend of adding AI to every productivity tool, framing LibreOffice's lack of AI as a deliberate choice that serves users who want predictable, privacy-respecting software.

An open-source alternative to SketchUp has been built and is gaining attention in the 3D design community. The project offers free, community-driven 3D modeling tools that directly compete with Trimble's commercial SketchUp software. Coverage from 3D modeling outlets suggests growing interest in open-source options as users look for alternatives to subscription-based professional software.

A discussion question about the Matrix chat protocol is circulating across Fediverse communities, including Lemmy and Mastodon users. The prompt asks for opinions on Matrix as a chat option, with comparisons to Discord, and touches on themes of decentralization, free and open-source software, and internet culture. Replies from the community are being shared and engaged with across connected decentralized platforms.

An Android user says no free and open-source camera app meets their needs, so they stick with Google's Pixel Camera. Open Camera is described as outdated and still built on the older camera2 API, LibreCamera is rarely updated, and Fossify feels generic. The complaint highlights a wider gap in the open-source Android ecosystem, where proprietary camera apps still lead on image quality and API support.

F-Droid, the largest open-source app store for Android, has officially announced it is refusing to comply with Google's requirements. The decision makes the open-source marketplace a direct point of friction with Google's control over the Android ecosystem, and it is drawing attention in discussions about app store policies, developer freedom, and Google's tightening grip on Android software distribution.