Web — Tech News

Все темы AI agents ai api architecture automation backend beginners career database devchallenge devops discuss javascript linux llm machinelearning mcp opensource performance productivity programming python react security showdev testing tutorial typescript webdev

EN

What 50 open source projects taught us about security in the AI era

See how the open source projects in Session 4 of the GitHub Secure Open Source Fund combined AI-assisted workflows, maintainer expertise, GitHub sec…

Maintainers Open Source Security Supply chain security AI security open source supply chain security

EN

How we took malware advisories beyond npm

GitHub malware advisories no longer stop at npm. Here's how we wired OpenSSF's malicious-packages data into the Advisory Database, and why we built…

Security Supply chain security GitHub Advisory Database malware npm open source supply chain security

EN

The case for a cooldown: Why Dependabot now waits before issuing version updates

A new default three-day cooldown delays version update pull requests so maintainers and security researchers can address findings in a release befor…

Security Supply chain security Dependabot supply chain security