This edition’s lead story looks at a wave of AI-driven acquisitions in the open source world, and what it says about where the real competition in the AI stack is actually playing out.

Elsewhere, Linus Torvalds puts his foot down on AI in the Linux kernel; the Linux Foundation gives AI agents a way to pay for things; Apple quietly acquires an open source observability startup; and much more.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

AI and the open source land grab

AI is spurring a lot of acquisitions in the open-source realm of late, with the likes of Cursor (itself acquired by SpaceX) snapping up Continue, a model-agnostic open source coding assistant, and Vercel taking on Better Auth, an open source TypeScript authentication library it plans to use as the foundation for a new agent identity protocol.

In the past week alone, three more deals landed. Prefect, the open source workflow orchestrator, acquired fellow Apache Airflow rival Dagster, a move positioned as a bet on owning the governance and execution layer for AI agents. And while Vercel declined to comment on the record, George Fahmy took to LinkedIn to reveal that his open source infrastructure agent Stakpak — which lives on servers, managing deployments and keeping applications running — had joined Vercel.

Arguably the biggest deal in amongst all this, though, was Anaconda’s acquisition of Kilo, an open-source startup I’ve been tracking for Forkable and elsewhere since its early days.

Founded by GitLab co-founder Sid Sijbrandij, Kilo is an open source coding agent that lets developers plug in whichever AI model they choose and switch freely as pricing or performance changes — routing close to 10 trillion tokens a month across 500-plus models from more than 60 providers. Anaconda, which has spent more than a decade giving enterprises a governed, auditable way to manage open source Python environments, sees Kilo filling a governance gap it believes most enterprises haven’t addressed.

“Right now, most enterprises pick one of two false options: lock down to a single tool and model provider, or let developers use whatever they want with zero visibility,” CEO David DeSanto told me for The New Stack. “Neither is a real strategy.”

These various acquisitions collectively highlight different layers of the same emerging stack, including agent identity, orchestration, coding, and infrastructure. And in each case, the open source nature of the target was the big selling point. Vercel didn’t build an authentication library from scratch; it acquired one with 4.7 million weekly downloads and a developer community already built around it. Anaconda didn’t build a coding agent; it bought one with 3 million developers already routing 10 trillion tokens through it.

The models themselves stopped being the big blocker a long time ago, and the race now is to assemble the best harness around them — and open source projects, with their built-in communities and developer trust, are turning out to be the fastest way in.

Read more: The New Stack

<Sovereignty watch>

Germany builds its own AI, Swiss Army ditches Microsoft’s

Open source is becoming Europe’s weapon of choice in the sovereignty debate, and two developments this past week illustrate why.

Germany’s Soofi consortium, a group of research institutes, universities and AI companies coordinated by the German AI Association and funded under the EU’s NextGenerationEU programme, has published the pretraining tech report for Soofi S, its open source foundation model for German and English. Model weights are now in a gated beta on Hugging Face ahead of a full open release, with the consortium claiming Soofi S leads among fully open models on both English and German benchmarks, beating models significantly larger than itself.

Meanwhile, Switzerland’s Cyber Command — the unit responsible for the armed forces’ cybersecurity operations — has announced it will replace Microsoft 365 with OpenDesk across all its workstations by October, after its head concluded the software posed an unacceptable risk of data leaking unnoticed to foreign security agencies.

While Switzerland is just the latest in a long line of government bodies ditching Microsoft’s omnipresent productivity software, together these stories point to a dual-pronged approach to reducing reliance on US technology: building sovereign alternatives from scratch, and leaning on existing European open source infrastructure like OpenDesk.

Read more: Soofi | Heise

<Patch notes>

‘Linux isn’t an anti-AI project’

Linux creator Linus Torvalds has put his foot down on the Linux kernel mailing list, after some maintainers pushed back on the use of LLMs in kernel development. Torvalds made clear the project would not take an anti-AI stance, telling dissenters they were welcome to fork the project or walk away. Decisions in the kernel community, he said, are made on technical merit, not fear of new tools.

Read more: Linus Torvalds | The New Stack

Linux Foundation gives AI agents a way to pay for things

The Linux Foundation has formally launched the x402 Foundation, a vendor-neutral body governing an open protocol that lets AI agents pay APIs and services per request using stablecoin wallets — no account, no API key, no advance relationship required. Founding members include Google, AWS, Cloudflare, Stripe, Visa, Mastercard, American Express, and Shopify.

Read more: The New Stack

Apple quietly acquired an open source observability startup

Apple acquired the assets and team behind SigScalr, maker of SigLens — an open source platform for collecting and analysing logs, metrics, and traces, positioned as a cheaper alternative to Splunk and Datadog. The deal closed in March but only surfaced via an EU Digital Markets Act filing; SigLens’ GitHub repo has since been archived.

Read more: 9to5Mac | EU DMA

Alibaba takes aim at Nvidia’s software grip

Alibaba’s chip unit T-Head has open-sourced SAIL, a software toolkit that lets developers run AI workloads on its own Zhenwu chips without depending on Nvidia. Huawei made a similar move last year, and both are part of a broader Chinese push to break developers’ reliance on Nvidia’s proprietary software ecosystem, which currently acts as a lock-in mechanism keeping most AI work tied to Nvidia hardware.

Read more: SCMP

Mira Murati’s startup ships its first open-weight model

Thinking Machines, the AI startup founded by OpenAI’s former CTO Mira Murati, has released Inkling — a 975-billion-parameter open-weight model and its first general-purpose release. It put in a competitive showing on agent tasks in benchmarks against the likes of Anthropic, Google, and OpenAI, though closed frontier models still lead overall.

Read more: Thinking Machines

Google open-sources a tool to spot AI you didn’t know was running

Google has open-sourced k8s-aibom, a lightweight Kubernetes controller that continuously scans live clusters to detect AI workloads — inference servers, agent stacks, RAG pipelines — and generates auditable bills of materials. It is aimed at security and compliance teams dealing with shadow AI deployments.

Read more: Google

<Final commit>

Microsoft digs up a 30-year-old IRC curiosity — and open-sources it

In 1996, Microsoft shipped Comic Chat — an IRC (internet relay chat) that turned text conversations into comic strips, complete with illustrated characters, speech bubbles, and algorithmically assigned expressions. If you typed something angry, your avatar frowned.

But it also happened to be the place that truly “popularised” Comic Sans, which designer Vincent Connare had created two years earlier. The software was quietly forgotten, until Microsoft last week announced it was releasing the original source code on GitHub, some thirty years on.

The codebase is largely untouched, with a handful of AI-assisted updates to get the ancient C++ compiling on modern Visual Studio and running on today’s high-resolution screens. What makes it interesting beyond the nostalgia is the throughline Scott Hanselman, VP at Microsoft/GitHub, draws to today: Comic Chat’s tone-reading was entirely rules-based, with no LLM behind it, yet it “anticipated the idea that software could interpret a conversation and give an avatar expressive behaviour, rather than merely displaying text.”

Clearly nothing to do with generative AI, but something quite aligned with it in spirit.

Read more: The New Stack | Comic Chat

This week's lead story covers the formal launch of the OpenClaw Foundation — the independent body now stewarding one of the year’s biggest open source success stories, and the question of what neutrality actually means when your backers include OpenAI, Microsoft, Nvidia, and Tencent.

Elsewhere, sovereignty continues to dominate the agenda; Godot bans AI-generated code to protect its contributor pipeline; Vercel and Aikido both make strategic open-source acquisitions; and a plethora more.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

“The Switzerland of AI”

OpenClaw is an open-source, self-hosted AI agent that runs on a user’s own machine, giving it direct access to files, messaging apps, and everyday tools. It has become one of the defining open source success stories of 2026 — its GitHub repository now sits sixth among the most-starred projects of all time, above the likes of Linux and React.

When OpenClaw creator Peter Steinberger joined OpenAI in February, the project’s future looked uncertain. However, Steinberger and OpenAI promised an independent foundation would eventually take stewardship of the project. That foundation has now formally launched, with 501(c)(3) non-profit status in place and a first full-time team of ten hired across engineering and operations.

The OpenClaw Foundation is chaired by entrepreneur and investor Dave Morin, who says he wants OpenClaw to become the “Switzerland of AI” — neutral ground where every model and every lab can collaborate on standards for the agentic era.

“The great open source projects of our time…. endure because a neutral steward stands behind them,” Morin wrote in the announcement.

The question is how neutral that stewardship can realistically be. OpenAI, GitHub, Nvidia, Microsoft, and Tencent are among the project’s main backers, with more than two dozen core maintainers drawn heavily from the world’s largest technology companies.

Morin, however, positions this as a feature rather than a flaw.

“When the largest technology companies and research universities in the world build on a community project and contribute back, that’s the open source flywheel working exactly as intended,” he writes.

It is worth noting that OpenClaw's rapid growth came with real security headaches early on — and the involvement of Microsoft, OpenAI, and Tencent is, in part, a direct response to that. At 4.5 million new self-hosted instances a week, getting governance right is critical.

Read more: The New Stack | OpenClaw

<Sovereignty watch>

Tech independence push gathers pace

Sovereignty continues to gather momentum, particularly in Europe. The US Supreme Court has thrown the EU-US data transfer framework into fresh doubt, after the conservative majority found that the independence of the Federal Trade Commission (FTC) — the body the EU relies on to assess whether US data protections are adequate — is unconstitutional.

Gina Plat, from the Dutch government’s open source programme office (OSPO), said the ruling is "another reason to choose EU alternatives" to US tech services, because without an independent FTC, there is no longer a credible body assessing whether US data protections meet EU standards.

European governments appear to agree. Mecklenburg-Vorpommern became the latest German state to swap Microsoft SharePoint for Nextcloud. And Portugal launched Amália, its first open source large language model, built for European Portuguese.

The sovereignty argument has an massive enterprise dimension too: Palantir's Alex Karp and Mistral's Arthur Mensch both argued that proprietary AI providers are accumulating leverage over the enterprises that depend on them — and the Anthropic Fable ban gave that argument its most concrete example yet.

Read more: NOYB | The Register | Portuguese Govt. | The New Stack

<Patch notes>

Trusted mentors

Godot has updated its contribution policy to bar AI-generated code, citing a longstanding pull request (PR) backlog — but the deeper concern is mentorship: reviewing a human contribution is how the project grows future maintainers, and AI-generated PRs short-circuit that pipeline entirely.

Read more: The New Stack

Vercel bets on agent identity

Vercel has acquired Better Auth, the open source TypeScript authentication library, to build out Agent Auth — a protocol giving AI agents their own scoped, revocable identities rather than borrowing credentials from whoever deployed them.

Read more: The New Stack

Aikido buys its way into in-place open source patching

Belgian cybersecurity company Aikido has acquired Root for $70 million, gaining technology that patches open source vulnerabilities at the exact version teams are already running — no upgrade needed.

Read more: The New Stack

TypeScript gets a speed jump

Microsoft has shipped TypeScript 7.0, rebuilt from the ground up in Go, promising build times roughly 8 to 12 times faster than its predecessor.

Read more: Microsoft

GitHub's ex-CEO is building what GitHub should have been

Thomas Dohmke, who exited the GitHub CEO hotseat last year to found Entire, has launched a distributed Git network that mirrors repositories onto regional infrastructure so agent fleets can clone at scale without hitting centralised rate limits. The Git backend will be open sourced.

Read more: Entire

The open source AI infra bet keeps getting bigger

Together AI, which runs inference for open-weight models such as DeepSeek, Kimi, and MiniMax, has raised $800 million at a $8.3 billion valuation, with annual bookings topping $1.15 billion last quarter as enterprises increasingly route away from closed frontier models.

Read more: Together AI

Ollama nabs $65M as local AI goes mainstream

Ollama, which lets developers run open-weight AI models locally with a single command, has raised $65 million in a series B round of funding. The company says usage has nearly doubled since January to 8.9 million monthly active developers.

Read more: TechCrunch

IBM and Red Hat open Lightwell for business

IBM and Red Hat have commercially launched Lightwell, giving enterprises access to more than 6,500 remediated, digitally signed open source dependencies in Java and Python.

Read more: IBM

GitHub blocks dodgy licences at the PR gate

GitHub launched a licence compliance feature in public preview, which scans pull request dependencies against an enterprise-wide policy and blocking merges where licences don't pass.

Read more: Help Net Security

Linux Foundation adds two strings to its bow

The Linux Foundation has launched Akrites, a coordinated vulnerability disclosure body backed by AWS, Anthropic, Google, Microsoft, OpenAI and 15 others, built to get fixes upstream before attackers can exploit them. Separately, the Foundation this week announced the Open Health Stack Software Foundation, a vendor-neutral home for open source digital health tools backed by Google, Microsoft, the WHO, and UNICEF.

Read more: The New Stack | The Linux Foundation

<Final commit>

300-year-old estate builds open-source wildlife listening network

Blenheim Palace, the UNESCO World Heritage Site and birthplace of Winston Churchill, has released an open source wildlife monitoring platform that turns ordinary microphones scattered across a landscape into round-the-clock biodiversity recorders.

The system, called BASE, identifies birdsong, bat calls, bees, and even underground insect activity, feeding the results into a live public dashboard. Rather than building the detection models from scratch, Blenheim's “innovation” team combined existing scientific tools — including BirdNET from Cornell Lab of Ornithology and Chemnitz University of Technology, and BatDetect2 from UCL researchers — with its own models trained on local grasshopper and bush cricket recordings.

"We didn't build the science from scratch; we stood on the shoulders of brilliant researchers around the world and combined their work into something anyone can run," said David Green, Blenheim's Head of Innovation.

The platform is free for schools, citizen scientists, and ecologists to deploy.

Read more: BASE (GitHub)

In this edition, I check in with Zach Lloyd, founder and CEO of Warp, a developer tooling startup behind a popular AI-native terminal that announced a couple of months back that it was open-sourcing its client after years of internal debate.

The move reflects a wider rethink happening across developer tools — as coding agents take on more of the implementation work, companies are running into the same problem: how do you keep human judgement in the loop without it becoming a blocker?

Lloyd’s bet is that opening the codebase lets a community of contributors absorb that work alongside Warp’s own team, particularly across the long tail of platforms, edge cases, and quality-of-life fixes that a startup's core engineering likely has less bandwidth for.

“We’ve gone from having a team of 30 engineers who can build on Warp, to having hundreds of people who can help contribute,” Lloyd explained.

Read the story in full below.

The path to open source

Zach Lloyd spent more than seven years as a principal engineer at Google, where he led engineering efforts around Google Sheets and the wider productivity suite. After leaving in 2014, he co-founded and served as CTO of SelfMade, a venture-backed New York startup, before a short stint as interim CTO at TIME. He launched Warp in 2020.

The company, essentially, started as a terminal — a rebuild of one of software’s oldest interfaces, aimed at developers who wanted speed and collaboration baked in. It has since grown into what Lloyd calls an “agentic development environment,” with code editing, diffs, and the ability to move agent sessions to the cloud. Warp now claims close to a million active developers, with users at companies including Google, Amazon, GitHub, Nvidia, and even OpenAI.

The decision to open the client, though, took years to arrive at, with Lloyd alluding to these plans online as far back as 2022. “Even when we first launched Warp, I always thought the client would end up open source,” Lloyd told Forkable. “We kind of revisited it every single year.”

Tipping the balance

Running a popular open source project at any kind of volume usually means triaging issues, reviewing contributions, and keeping quality consistent — a heavy lift for a relatively lean team.

What changed Lloyd’s mind was watching Warp’s own engineers shift their internal workflow toward agents. If agentic development was producing good results inside the company, he reasoned, the same approach might work applied to a public repo — with agents handling implementation and humans focused on direction and review.

And so that became the model: issues filed by the community get picked up by agents, specced, implemented, reviewed, and verified, with human checkpoints built in at each stage.

Lloyd described the result as something akin to a public software factory.

“We ended up thinking that, with agents doing every step from triage to speccing hard changes to implementing them to code reviewing them, we could actually run it with higher efficiency,” he said.

The orchestration behind all this runs on Oz, Warp’s platform for managing agent workflows across local and cloud environments. Through Oz, teams can run agents in parallel, automate recurring workflows, and monitor long-running tasks centrally — with every agent run generating an audit trail accessible to any team member.

The OpenAI factor

It’s worth noting that OpenAI is the founding sponsor of the new open-source repository, with the agentic workflows powered by GPT models. And this detail has been used by some to poke holes in the open-source credentials of the project, notably rival AI coding platform Kilo Code, which argued that opening the codebase while routing the recommended contribution workflow through a proprietary platform backed by a single AI provider amounts to quite a significant caveat.

“A truly open IDE experience makes it as easy as possible to switch between models freely - with no one provider dominating or controlling the experience,” Kilo wrote in a blog post at the time.

On the commercial side, Warp does support bring-your-own-key (BYOK) access for the likes of Anthropic, Google, and OpenAI, and Lloyd said the company is open to bringing on additional sponsors beyond as the open source project matures. "We sort of want to be Switzerland in this world," he said. “But we’re a startup, and having this support for the agents, because it’s expensive, is really valuable, and they’ve been a great partner for us.”

The early signs, by Lloyd’s account, have been positive. Some two months on, the repository has accumulated nearly 63,000 GitHub stars and more than 5,100 forks, and Lloyd said contributions are coming in at a rate of hundreds per week. He pointed to fixes arriving for things the core team simply wouldn't have had bandwidth for, such as internationalisation, Windows support, and embedded systems.

"Developers are fixing, improving stuff that we wouldn't have done on our own," he said.

Of course, there’s a clear competitive logic underneath the openness. Warp operates against better-funded, closed-source rivals, and opening the codebase functions as a way to extend its effective team size without growing headcount.

“We’ve gone from having a team of 30 engineers who can build on Warp, to having hundreds of people who can help contribute,” he said.

He sees this as a broader strategic option for companies in general. “I think it’s one of the key things a startup can choose to do to break through,” he said, pointing to the secondary benefits of community goodwill and developer interest beyond the contributions themselves.

The slop question

Open source communities are split on agent-generated contributions — some projects ban them outright over quality concerns. Warp has gone the other way, though Lloyd is careful to draw a line between that and full automation. “We’re on the other extreme end,” he said, while acknowledging it’s one of the risks the company has to work hard to mitigate.

The way Warp has structured it, human judgement is built into each stage of the pipeline. An issue being filed doesn’t automatically mean it gets built — someone has to decide it’s worth pursuing. Before implementation begins, the team assesses whether the proposed approach feels like the right product experience and the right technical solution. And despite the speed penalty it carries, everything still goes through human code review. “We would go faster if we didn’t do human code review,” Lloyd said, “but we are trying to make sure we’re striking the balance.”

In truth, there’s perhaps a more fundamental question at play here, about what open source contribution even means in this model. Warp is written in Rust — a powerful but demanding language that would traditionally put meaningful contribution out of reach for many developers. With Agents handling the implementation work, the human role shifts toward ideas, direction, and verification — lowering the bar for who can meaningfully participate.

“You don’t even need to know how to code to improve the app,” he said. “A lot of people don’t know Rust, but they can still contribute.”

This week’s lead story looks at the race to build a GitHub alternative for the agentic era — with Cursor, GitLab, and Zed all taking aim at the pull request model that has defined software collaboration for nearly two decades.

Elsewhere, OpenAI launches a programme to patch vulnerabilities in widely used open source projects; the EU picks a winner to build its own frontier AI model in all 24 official languages; and the Linux Foundation wants to give AI agents a DNS-style identity.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

GitHub built the pull request, AI is breaking it.

GitHub has a problem it helped create. The platform that kickstarted the AI coding era with the launch of Copilot in 2021 is now struggling under the weight of what that era has produced — processing around 1.4 billion commits per month, up from 1 billion across all of 2025, with AI agents alone generating more than 17 million pull requests every month.

The cracks were already showing before the agent explosion. As Forkable reported in December, a stream of open-source projects — including the Zig programming language and the Naev space trading game — had been migrating away from GitHub, citing unreliable CI pipelines, corporate control concerns, and discomfort with the platform’s accelerating AI focus, with many heading to Forgejo-based hosts like Codeberg.

Brian Douglas, GitHub’s former director of developer advocacy who recently launched his own AI infrastructure startup, told me in a story for The New Stack that the agent era is deepening that alienation.

“Agents are quickly killing the will for doing open source,” Douglas said — his point being that as agents handle more of the writing and review, the human collaboration that made open-source culture what it is, is beginning to hollow out. “Right now, the velocity of projects being created is overwhelming GitHub, and engineers are not looking at the code,” he continued. “So if the goal is to put it in the cloud so agents are managing the code, I think that is absolutely an opportunity for disruption.”

Several companies are now taking that opportunity seriously. At a developer conference in San Francisco last week, Graphite co-founder Tomas Reimers — whose code review startup was acquired by Cursor in January — unveiled Origin, a Git-compatible code hosting platform rebuilt specifically for the scale and speed of agent-driven development. The same day, SpaceX announced it was acquiring Cursor for $60 billion.

Origin isn’t alone. At its Transcend conference in London the previous week, GitLab announced a private beta of “Next Generation Source Code Management” — preserving the Git protocol but overhauling the architecture underneath it, so agents can interrogate repositories without pulling down a full local copy, claiming up to 50 times faster task execution per agent. Notably, Anthropic is a design partner.

And Zed co-founder Nathan Sobo shone some light on DeltaDB, arguably the most radical of the three: rather than organising work around commits, it records every agent operation as a granular delta, linked back to the conversation that generated it. A beta is reportedly weeks away.

None of these products are in public hands yet. But the pull request — GitHub's signature contribution to how software gets built — was designed for a world where humans wrote code deliberately, one change at a time. That world is receding fast, and several well-funded teams are now betting GitHub that won't be the one to replace it.

Read more: The New Stack

<Patch notes>

Cursor swallows another open source project

Cursor’s been very busy! The company quietly acquired Continue, an open-source AI coding assistant with 34,000 GitHub stars. In truth, it seems it was more of an acqui-hire, with some of the talent heading over to Cursor, and the codebase being handed to the community.

Read more: The New Stack

OpenAI wants to patch the planet's open source bugs

OpenAI launched Patch the Planet, a programme built with security firm Trail of Bits that uses its GPT-5.5-Cyber model to find and fix vulnerabilities in widely used open source projects — including cURL, Python, and the Go project — with human experts reviewing findings before they reach maintainers.

Read more: OpenAI

Apple joins the open-source party

Swift Package Index, the community-built directory of Swift packages, has been acquired by Apple — bringing the open-source project under the official stewardship of the very company whose ecosystem it serves.

Read more: Swift Package Index

Linux Foundation wants to give AI agents a DNS-style identity

The Linux Foundation has announced the Agent Name Service, an open standard that extends the internet's existing DNS infrastructure to give AI agents verifiable identities — letting systems confirm who an agent represents, what it's allowed to do, and whether its code has been tampered with.

Read more: The Linux Foundation

GitHub joins open source coalition to push back on California's AI law

GitHub has joined Black Forest Labs, Hugging Face, and Mozilla in calling for amendments to California's AI Transparency Act, arguing that a provision requiring license revocation conflicts with how open-source licenses fundamentally work.

Read more: GitHub

OSI launches Open Source AI Fellowship at the UN

The Open Source Initiative (OSI) has announced a two-year fellowship, grounded in a partnership with Duke University and backed by Red Hat, AWS, Google, and Mozilla, to build research and consensus around what it actually means for an AI system to call itself open source.

Read more: OSI

Europe picks a winner to build its own open source frontier AI model

The European Commission has selected the EUROPA consortium, led by Italian company Domyn, to build a 400-billion-parameter open source AI model covering all 24 official EU languages — Europe's most concrete bid yet to compete at the frontier model layer, not just regulate it.

Read more: European Commission

New research maps how governments are building open source capability

Researchers at RISE Research Institutes of Sweden and OpenForum Europe have published a peer-reviewed study identifying six archetypes for how public sector organisations can structure Open Source Program Offices (OSPOs), based on interviews across 16 cases in EU countries.

Read more: Johan Linåker (LinkedIn) | ScienceDirect

<Final commit>

Shining a light on banned books

Security researcher Richard Osgood has turned a cheap WiFi-enabled smart lightbulb into what he calls a "cyberpunk digital dead drop" — a covert, offline library of banned books that anyone nearby can access simply by connecting to the open Wi-Fi network it broadcasts.

The idea is fairly low-tech: screw the bulb into a socket, leave it switched on, and it silently serves ebooks to anyone within range, no internet connection required.

Storage is tight — the bulb's 4MB flash chip, repartitioned to carve out 2MB for books, fits only a handful of EPUBs — but Osgood argues that constraint is almost the point.

"Each dead drop will be representative of the person who created it," he wrote.

The firmware erases stored Wi-Fi credentials on first boot, so a bulb can be installed in a public space without exposing anyone's home network. All the code is open source on Codeberg.

Read more: Tom’s Hardware | Richard Osgood | Codeberg

This week’s lead story looks at the fallout from the US government’s order forcing Anthropic to pull Fable 5 and Mythos 5 worldwide — and how quickly that opening was seized on by those professing the merits of more open-aligned models.

Elsewhere, DeepSeek raise its first-ever outside funding; Google, Microsoft and OpenAI team up on a new AI trust layer; Yale researchers propose “copyleft” rules for generative AI; and Epic Games open-source a Git alternative built for developers drowning in giant files.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

A kill switch felt around the world

Last Friday, the US Government ordered Anthropic to pull Fable 5 and Mythos 5 — its two most capable models, launched just three days earlier — from every customer outside the United States, citing national security concerns over an alleged jailbreak. Because Anthropic couldn’t reliably verify user nationality in real time, it disabled both models for everyone, everywhere, including its own non-citizen employees.

Every other Claude model remained untouched. Anthropic disputed the severity of the finding, saying the demonstrated technique amounted to little more than asking a model to read code and flag bugs — “used every day by the defenders who keep systems safe” — and that a comparable standard applied industry-wide “would essentially halt all new model deployments for all frontier model providers.”

The fallout from the fracas arrived, on cue. In India, Zoho founder Sridhar Vembu declared that “globalisation is dead,” urging the government to back domestic and Chinese open-source models rather than depend on US providers that “can have access restricted at any time.”

In Hong Kong, investors reached the same conclusion from the opposite direction: shares in Zhipu AI, the company behind the GLM model family, surged as much as 48% after JPMorgan and Bank of America named it a winner in the China AI race — a rally that coincided with the company rushing out its latest open-weight model, GLM-5.2, replete with a pointed message: “Cutting-edge intelligence should not belong to only a few, nor should it be withdrawn at any time.”

On benchmarks, GLM-5.2 now sits within a point of Claude Opus 4.8 on long-horizon coding tasks, at roughly a sixth of the price — the kind of gap that companies running AI agents at volume aren’t willing to ignore. Forkable reported last week on one such case: Lindy, a no-code AI agent platform, switched its entire production stack from Anthropic to DeepSeek and said it’s saving millions in the process.

Box CEO Aaron Levie also weighed in, saying that regulating AI at the “model layer” rather than the “applied layer” (i.e. the products and services built atop the model) hands every other country a reason to build its own. “If at any moment a model can become unavailable to your country’s users or businesses, this poses very real risk on relying on technology from a particular country,” he wrote on social media, predicting the likely beneficiary would be open-weight models — “which currently is generally not coming from the US.”

Even US companies are hedging. Microsoft is reportedly weighing a version of DeepSeek V4 to power a cheaper tier of Copilot Cowork, alongside its existing OpenAI and Anthropic options. And over in France, Mistral CEO Arthur Mensch used the moment to make his own pitch, writing that his company exists “outside of centralised control exercised by states or corporations.”

The unease over depending on a single, US-controlled platform isn’t confined to AI models. As Forkable reported in December, a steady stream of open source projects, from the Zig programming language to the Naev game engine, have quietly migrated away from GitHub in recent months, citing similar concerns about concentrated corporate control (as well as performance issues). The Fable ban gives that argument sharper teeth: when access can be revoked overnight by directive, dependence on any single company, in any single country, starts to look like a strategic liability.

None of this means open-weight models have overtaken the frontier quite yet. But the past week has handed every argument for sovereign, open AI infrastructure a concrete example of what happens when access to the frontier can be switched off overnight by a single state.

Read more: Anthropic | NDTV | Aaron Levie | Arthur Mensch

<Patch notes>

DeepSeek nabs $7.4bn — and Liang Wenfeng keeps the keys

DeepSeek, the open-weight AI lab that rattled Silicon Valley with R1 last year, has closed its first-ever external funding round: more than $7.4 billion at a valuation above $50 billion, making it China's most valuable AI startup. Until now, every model the company has shipped was funded entirely in-house. Founder Liang Wenfeng remains firmly in control, with the new capital routed through a vehicle that strips outside investors of voting rights.

Read more: SCMP | Yahoo Finance

Google, Microsoft and OpenAI build AI's missing trust layer

The Linux Foundation has launched the Appia Foundation, a new body backed by 13 founding members — including Google, Microsoft, OpenAI, Arm, Siemens, and Mastercard — to build open, vendor-neutral specifications that let organisations prove their AI systems meet safety and compliance standards. The aim is to let "conformity evidence" be reused across the AI supply chain rather than rebuilt for every vendor and every regulator.

Read more: The New Stack

Google wants to take the pain out of fine-tuning

Google has released a research preview of OpenRL, a self-hosted, open-source API for fine-tuning LLMs with reinforcement learning on your own Kubernetes cluster. The project, inspired by Thinking Machines' Tinker design pattern, aims to separate infrastructure concerns from AI research the way Kubernetes itself separated infrastructure from application development.

Read more: Google | OpenRL

Chainguard scanner catches 52,000 packages that pass every test and still misbehave

Chainguard has launched a scanner that blocks "greyware" — open source packages that openly disclose what they do, pass every existing security check, and still perform actions no security team would sign off on, from credential harvesting to silent remote access. The tool has already screened more than 100,000 npm packages a day and blocked over 52,000 of them, a problem Chainguard says is being made worse by AI agents pulling in dependencies faster than any human can review.

Read more: The New Stack

Yale proposes "copyleft" rules to make AI training data honest

Researchers at Yale's Digital Ethics Center have proposed a Contextual Copyleft AI License, which would treat generative AI models trained on open source code as derivative works and require developers to publicly disclose the model's architecture and training data. "Our analysis showed that extending the copyleft concept to generative artificial intelligence has the potential to give open-source software developers meaningful control over how AI developers use their code," lead author Grant Shanklin said.

Read more: Yale News

Xiaomi's MiMo Code claims it beats Claude Code on long tasks

Xiaomi has open-sourced MiMo Code, a terminal-native coding agent the company claims outperforms Claude Code specifically on tasks that run beyond 200 steps — the point where most agents start losing the thread and compounding small errors.

Read more: VentureBeat

<Final commit>

Epic drops a Git rival built for hoarders of giant files

Game developers have long endured an awkward relationship with Git: brilliant for code, miserable for the multi-gigabyte textures, meshes, and audio files that actually make up most of a modern game project.

And so Epic Games has decided enough is enough, releasing Lore, an MIT-licensed, Rust-built version control system designed from the ground up for exactly that mix — code sitting alongside enormous binary assets.

Where Git treats large files as a bolt-on via Git LFS, Lore handles them natively, with content-addressed storage, fragment-level deduplication, and “sparse” working copies that only download what you actually need, sparing 3D artists from hauling an entire asset library onto their laptop just to open one file. Everyday operations like staging, committing, and branching also work entirely offline, with no network round trip required. It’s not aimed at replacing Git for everyone — but for anyone who has ever watched a repository balloon to 40GB because someone committed a 4K texture pack, it might be a quiet revelation.

Read more: Phoronix | Lore | GitHub

This week’s lead story looks at how soaring AI inference costs are forcing some companies into decisions they probably wouldn't have entertained a year ago — and why one startup's switch from Anthropic to DeepSeek says a lot about where open-weight models now stand.

Elsewhere, Euro-Office launched and immediately drew fire from LibreOffice; a developer built an open source app to liberate Oura Ring data from its subscription paywall; and more.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

When the inference bill exceeds payroll, something has to give

Lindy, an AI agent platform that automates everyday work tasks such as email triage, has switched its entire model infrastructure from Anthropic to DeepSeek v4, the open-weight model from Chinese AI research company DeepSeek. The move, announced last week by founder and CEO Flo Crivello, came down to one thing: his AI bill had grown bigger than his wage bill.

“Pulled the trigger today and switched 100% of Lindy traffic to DeepSeek v4, churning from Anthropic models,” Crivello wrote on X. “Saves us millions of $ and we’re actually seeing an increase in performance on many core use cases. Transformative for the business.”

Lindy isn’t alone in hitting this wall. Uber exhausted its entire 2026 AI budget in four months, largely on Claude Code. GitHub scrapped its flat-rate Copilot subscription after agentic coding sessions made the numbers unworkable. The Linux Foundation’s newly launched Tokenomics Foundation — backed by Google, Microsoft, IBM, and Salesforce — exists precisely because no agreed standard exists for enterprises to track or benchmark what AI is actually costing them.

What makes Lindy’s switch significant, from Forkable’s perspective at least, isn’t the saving — it’s what it says about where open-weight models now sit. DeepSeek first rattled the industry in January 2025, when its R1 model went toe-to-toe with leading US frontier models at a fraction of the price. V4, released in preview in April, went further — notable for being the first frontier-class AI stack built entirely within China’s own technology supply chain.

The traffic data tells its own story. Vercel’s AI Gateway recorded DeepSeek’s share of token volume climbing from under 1% to 17% in a single month in May — while its share of actual spend barely moved from 1%, pointing to just how much cheaper these tokens are to run.

Lindy’s migration took far longer than expected — six to nine months of evaluation, gradual rollout, and significant prompt re-engineering. “100x more work than we thought,” Crivello said: “I wouldn’t be surprised if Anthropic’s next release earned them our business back, but they would need to significantly cut prices.”

Read more: The New Stack

<Patch notes>

Euro-Office launches — and LibreOffice isn't impressed

The Document Foundation, the organisation behind LibreOffice, has publicly accused Euro-Office — the European open-source office suite that launched last week as an alternative to Microsoft 365 and Google Workspace — of undermining the very sovereignty it claims to champion.

Read more: The Register

Google joins Eclipse Foundation to push open source developer tools

Google has become a strategic member of the Eclipse Foundation, deepening its involvement in open source developer tooling with a focus on AI-integrated development environments.

Read more: Google

Microsoft open-sources ASSERT to turn specs into agent evals

Microsoft's Responsible AI team has released ASSERT, an open-source framework that converts plain-language behaviour specifications into full evaluation pipelines for AI agents — automatically generating test scenarios, datasets, and scorecards. The idea is simple: if you've written down what your agent should do, ASSERT turns that into something you can actually run and inspect.

Read more: Microsoft | ASSERT

UK backs open source AI builders with compute and a seat at the table

Speaking at London Tech Week, UK AI Minister Kanishka Narayan announced an Open-Source AI Builder Fund providing over £500,000 worth of compute to help developers move prototypes into production, alongside a mentoring scheme and a new dev board giving ten developers under 30 a direct line into government policy.

Read more: UK Gov | Computing

Linux Foundation launches OpenSharing to standardise AI asset exchange

The Linux Foundation has launched OpenSharing, a vendor-neutral open protocol — contributed by Databricks and building on its Delta Sharing project — for sharing AI models, agent skills, and unstructured data across platforms without proprietary marketplaces or custom integrations.

Read more: Linux Foundation

<Final commit>

Cracked Oura: the open source app that breaks the subscription

An Oura Ring will cost you $400 for the hardware, plus up to $70 a year to actually see your health data. Developer Elmo Ahorinta thought that was a bit rich, so he built Cracked Oura — an open source desktop app that pulls your sleep, readiness, and activity data out of Oura's ecosystem entirely and stores it locally in an SQLite database.

It then generates dashboards he says are "at least as good as the official Oura dashboard."

EU data portability rules require Oura to let users export their own data, so Cracked Oura simply automates that process and does the rest itself. No subscription required.

Read more: Android Authority | GitHub

This week’s lead story looks at the European Commission’s landmark tech sovereignty package — and what it means for open source specifically.

Elsewhere, Euro-Office is set to launch as a European alternative to Microsoft 365 and Google Docs; IBM and Red Hat commit $5 billion to securing the open source supply chain; Supabase raises $500 million at a $10.5 billion valuation; and much more.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

Europe bets on open source to cut the cord from US and Chinese tech

On Wednesday, the European Commission (EC) published its European Technological Sovereignty Package — a bundle of legislative proposals covering semiconductors, cloud, AI, and, most notably for Forkable, a full Open Source Strategy.

Europe procures more than 80% of its key digital products, services, and infrastructure from non-EU suppliers — a dependence that reared its head last year when China curtailed semiconductor exports, pushing the European car industry to the brink. Add to that the question of what happens if a US administration decides to lean on American cloud providers, be it to cut off services or hand over sensitive European data.

Henna Virkkunen, the Commission’s vice-president for tech sovereignty, said that the EU cannot allow any foreign government or company to hold what she called the “kill switch possibility.” She pointed specifically to the 2018 US Cloud Act, which gives US federal authorities the power to reach into data held by American providers on foreign soil, as something fundamentally at odds with European rules.

As for the open source component of the package, well, some €2 billion over seven years to fund alternatives to proprietary software; a target of 30 million active users of open source collaboration tools by 2030; and a mandate that the EU Digital Identity Wallet be built on open source.

OpenForum Europe, a Brussels-based open source advocacy group, welcomed it as "a defining moment for open source in Europe" — the culmination of more than two decades of work to have open source treated as a foundation of Europe's digital future.

“This is Europe's most ambitious commitment to open source to date,” said Nicholas Gates, senior policy advisor at OpenForum Europe. “The devil is always in the details, but this is a remarkable step forward for open source in digital policy, and the Commission should be lauded for getting us this far.”

Even within the open source camp, there are doubts about some of the specifics of the sovereignty package: €2 billion spread thinly across seven years looks modest set against the Commission’s own figure of €264 billion spent annually on largely proprietary IT. Open source hardware barely features, too.

On the cloud provisions specifically, the Computer and Communications Industry Association (CCIA) — whose members include Amazon and Google — called the proposals a “dangerous recipe for progressive market shutdown,” arguing the move was “discriminatory.”

“By excluding trusted international technology providers based on their headquarters location and organisational structure, the Commission forces users to rely on a much more limited selection of digital products,” the CCIA wrote.

The proposals still require agreement from EU member states and the European Parliament, so there is a long way for this to get over the line. But Brussels has now, for the first time, placed open source at the centre of how Europe intends to take back control of its own digital infrastructure.

Drupal founder and project lead Dries Buytaert called the new open source strategy “a big step forward.”

“It treats Open Source as infrastructure, ties it to technological sovereignty, and backs it with real funding,” Buytaert wrote.

Read more: European Commission | Tech Policy Press | The Guardian

<Patch notes>

Europe's answer to Microsoft Office to go live

Speaking of sovereignty, the first stable version of Euro-Office is set to launch on June 9, courtesy of a coalition of European companies which have built an open-source office suite designed as a direct alternative to Microsoft 365 and Google Workspace for governments, public sector bodies, and regulated organisations.

Read more: ZDNET | Euro-Office

Tokenomics Foundation to tackle AI cost chaos

AI token costs are rising fast and nobody agrees on how to measure them. With that in mind, the Linux Foundation this week announced the Tokenomics Foundation, a new body tasked with building open standards, benchmarks, and best practices across the AI token economy, backed by Google, Microsoft, IBM, JPMorgan Chase, and Salesforce. Notably absent: Anthropic and OpenAI, the frontier model providers whose pricing sits at the heart of the problem.

Read more: The New Stack

JetBrains open-sources Mellum2

JetBrains has released Mellum2, an open-source coding model built to run entirely on your own infrastructure — a direct counter to coding tools that depend on third-party APIs.

Read more: The New Stack

IBM and Red Hat commit $5 billion to open source security

IBM and Red Hat launched Project Lightwell, an enterprise clearing house for securing the open source software supply chain, backed by a $5 billion commitment.

Read more: Red Hat

Netflix engineer open-sources AI cost-cutting tool

A senior Netflix engineer has released Project Headroom, an open-source tool that promises to cut LLM costs by stripping redundant tokens before they reach a model. Since its January release, the project has reportedly saved users around $700,000 and freed up 200 billion tokens.

Read more: The Register

Rayfin lands to bridge vibe coding and enterprise production

Microsoft has released Rayfin, an open-source SDK built to take apps created with AI-assisted vibe coding tools and make them fit for enterprise deployment, with security and governance baked in.

Read more: Microsoft

Cloudflare acquires VoidZero

Cloudflare has acquired VoidZero, the team behind Vite, Vitest, Rolldown, and Oxc — some of the most widely used open-source JavaScript build tools in the ecosystem. Cloudflare says Vite will remain open source and vendor-agnostic.

Read more: Cloudflare

Supabase raises $500 million at $10.5 billion valuation

Open-source Postgres development platform Supabase (previous coverage here) has closed a $500 million series F round of funding, doubling its valuation to $10.5 billion.

Read more: CNBC

Yugabyte launches Meko, a memory layer for AI agents

Open-source database company Yugabyte launched Meko, a shared memory layer designed to give AI agents persistent, consistent context across tasks and sessions.

Read more: Forkable

OpenTelemetry hits general availability

Seven years in the making, OpenTelemetry — the open-source observability framework that has become the telemetry standard for cloud computing — formally reached general availability. The project is now also positioning itself for the AI infrastructure era.

Read more: The New Stack

Gas Town comes to the cloud

Gas Town, the open-source AI agent orchestration project created by developer and writer Steve Yegge, has received a cloud-hosted version via Kilo. The new Wasteland feature supports running a thousand Gas Town instances simultaneously.

Read more: The New Stack

Ex-Block CTO goes all in on open agentic AI infrastructure

Manik Surtani has left his role as head of open source at payments company Block after eight years, to become CTO of the Agentic AI Foundation, a new organisation focused on keeping the next layer of AI infrastructure open.

Read more: Substack

<Final commit>

Open skies

Researchers at MIT and the University of Pennsylvania have published MIGHTY, an open-source trajectory planning system for autonomous drones that can avoid unexpected obstacles in real time while keeping to a smooth, time-efficient flight path.

The system runs entirely on the drone’s own onboard hardware, negating the need for the commercial solvers that currently underpin most high-performance alternatives — software that can carry price tags running into the hundreds of thousands of dollars. In tests, MIGHTY cut computation time by 9.3% and travel time by 13.1% compared to existing approaches, with a 100% success rate. Potential applications include search-and-rescue in collapsed buildings, last-mile delivery in cities, and infrastructure inspection.

The code is available on GitHub.

Read more: MIT News | Mighty (GitHub)

In this edition, I check in with Karthik Ranganathan, CEO and co-founder of Yugabyte, an open-source database company now pushing into AI infrastructure with the launch of Meko, a new “memory layer” for AI agents.

Meko reflects how infrastructure companies are reassessing their role in the agentic AI stack. As agents take on longer-running tasks across multiple systems, the problems companies keep hitting — shared context and coordination — are ones distributed systems engineers would recognise immediately.

"Agents are working from inconsistent views of what's true right now," Ranganathan told me. "This is because there is no way to enforce a shared truth."

Read the story in full below.

10 years in the making

When Karthik Ranganathan launched open-source database startup Yugabyte some 10 years ago, the company was focused on helping enterprises run PostgreSQL applications reliably — essentially, making sure apps and services stayed online and responsive even when spread across different data centers around the world.

AI agents, and the strain they would eventually place on data systems, weren’t part of the conversation.

Ranganathan arrived at Yugabyte after years building distributed database technology at Facebook, where he worked on projects including Apache Cassandra and HBase, before later joining cloud infrastructure company Nutanix. Yugabyte itself grew out of the cloud computing boom.

Now the company is turning its attention squarely towards AI agents. Last week, Yugabyte launched Meko, a “memory layer” designed to help AI agents store, share, and retain knowledge across tasks and between different agents.

The release comes as companies building agentic systems run into mounting difficulties around maintaining shared context, keeping information current, and tracking what agents have learned over time.

Many companies currently piece together agent memory using separate retrieval systems, databases, logging tools, and orchestration software. According to Ranganathan, that can create situations where different agents end up operating with different versions of the same information.

“Agents are working from inconsistent views of what's true right now,” Ranganathan explained to Forkable. “This is because there is no way to enforce a shared truth.”

As different agents interact with the same systems, one may update a piece of information while another continues working from an older version, causing errors and outdated assumptions to spread between agents over time.

“There’s no consistency model anywhere in a stitched stack,” Ranganathan continued.

Meko and the next layer of AI infrastructure

Meko, at its core, is a shared memory layer for AI agents. The software stores things like conversation history, agent decisions, shared knowledge, and longer-term memory in a single system that different agents can access. Yugabyte says the goal is to help agents retain context across tasks and sessions, while also giving teams a clearer record of how information moves between systems.

“Existing tools trace what agents did — they don't trace what agents learned, or how that learning propagated between agents,” Ranganathan said.

At the center of the platform are four main components: memory, knowledge, conversations, and traces. Together, those pieces are intended to handle persistent agent memory, shared organisational knowledge, conversational history, and records showing how agents arrived at particular decisions over time.

Ranganathan argues that many current AI tools can show prompts, tool calls, and latency, but struggle to explain how agents arrived at certain conclusions or how information spread between different systems over time. He also believes that growing regulatory pressure around AI accountability, including requirements around auditability, will place more scrutiny on those gaps as agentic systems take deeper root in enterprise software.

“None of these are fixable with better prompts or more retrieval,” Ranganathan continued. “They're infrastructure problems that need infrastructure solutions.”

The open source factor

For now, Meko is available by request only as a fully managed service, though Yugabyte says the intention is to release the underlying platform as open source. And the rationale for that, according to Ranganathan, is largely driven by the nature of the technology itself, and the belief that companies will be reluctant to build critical AI systems on top of closed memory infrastructure they cannot independently inspect or control.

“Memory infrastructure for agents will be deeply embedded in production applications — it holds the learned context, the conversation history, the audit trail of what agents knew and when,” Ranganathan explained. “That layer can’t be a proprietary black box. If we asked teams to commit their agent data to a closed system that they can’t self-host, audit, or extend, we’d lose them on day one. The data is too important to trust to a single vendor.”

The launch also reflects Yugabyte’s longer-running business model around open source infrastructure. The company has historically monetised through managed services built on top of its open source database technology.

Meko will ultimately follow a similar pattern, with Yugabyte making money through hosted and managed deployments aimed at enterprises that don’t want to operate the infrastructure themselves. Underneath, the system runs on YugabyteDB, the company’s PostgreSQL-compatible distributed database, which acts as the storage and coordination layer behind the memory system.

For Yugabyte, it’s also a bet on where enterprise software is heading — databases and data platforms angling for a foundational role in agentic systems, without the lock-in.

“If you’re building a multi-agent system where models will change, vendors will change, and you need an audit trail across the whole thing — that’s an infrastructure decision,” Ranganathan said. “And it shouldn’t be locked to whichever model you happened to start with.”

This week’s lead story looks at NHS England moving hundreds of public GitHub repositories behind closed doors, amid growing concern that AI systems capable of analysing codebases at scale are changing the security calculus around open source.

Elsewhere, China’s open-model boom continues with another massive funding round, AWS and Cisco unveil new infrastructure for securing AI agents and model supply chains, and a fresh wave of startups and investors pile into the tooling, inference, and orchestration layers forming around open AI systems.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

NHS locks down public code

AI-driven vulnerability discovery is starting to reshape how public institutions think about open source.

England’s National Health Service (NHS), one of the world’s largest public healthcare systems and among the biggest employers globally, has instructed teams to make hundreds of public GitHub repositories private by May 11, amid growing concern that modern AI systems can analyse open codebases for weaknesses at scale.

According to internal guidance seen by The Register, the move is tied directly to advances in AI-assisted security research, including Anthropic’s Mythos project, which recently demonstrated how frontier models can identify vulnerabilities in widely used software that had survived years of human review.

Notably, NHS isn’t responding to a known breach. Instead, it appears to be reacting to a broader concern: that the economics of vulnerability discovery have changed. Systems capable of ingesting and reasoning over large codebases may make it significantly easier — and cheaper — to identify weaknesses in publicly accessible software and infrastructure. By way of example, Anthropic said that Mythos had found a flaw in OpenBSD, a security-focused operating system, dating back 27 years.

The repositories affected reportedly include a broad mix of projects, from software tools and scripts to documentation and architecture resources. Many were public because NHS England, like other parts of the UK public sector, had increasingly embraced open-source principles around transparency, reuse, and reducing duplication across the public sector.

That context makes the move notable. For years, government-backed open-source efforts have operated on the assumption that openness improves software quality and security by allowing more people to inspect, test, and improve code. The NHS decision suggests some organisations are beginning to worry that the same visibility may now also lower the barrier for attackers equipped with increasingly capable AI tools.

The move also lands amid a broader debate unfolding across open source. In recent weeks, companies including Cal.com have argued that AI-assisted vulnerability research is forcing them to rethink how much code they expose publicly.

But the NHS case could be more consequential because it extends beyond startups and into national infrastructure. Open repositories are often used not just for software distribution, but for collaboration between agencies, procurement, and public accountability around taxpayer-funded systems.

For now, NHS says the move is temporary while it reassesses risk and governance around public code. Whether that becomes a lasting policy change may depend on how seriously institutions come to view AI-assisted vulnerability discovery — and whether openness itself is increasingly seen as part of the attack surface.

Read more: The Register

<Patch notes>

Moonshot AI lands $2B as China’s open-model boom grows

Chinese AI lab Moonshot AI has raised $2 billion at a $20 billion valuation, amid surging demand for open-weight AI models. The company’s Kimi models are gaining traction as China continues pushing an increasingly open AI ecosystem.

Read more: TechCrunch

New fund targets open-source science software

A new Open Source for Science Fund has launched to support the open software stack underpinning scientific research.

Read more: Open Source for Science Fund | OS 4 Science

GitHub adds security scanning for MCP agents

GitHub has launched dependency and secret scanning for its MCP server, allowing AI coding agents to catch leaked credentials and vulnerable packages before code is committed.

Read more: The New Stack

Anthropic donates open-source Petri toolkit

Anthropic is donating Petri, its open-source AI alignment and interpretability toolkit, to researchers and nonprofits working on model transparency and safety. Its new home is at Meridian Labs, an AI evaluation nonprofit.

Read more: Anthropic

Cisco launches model provenance toolkit

Cisco has released Model Provenance Kit, an open-source framework for tracking how AI models are built, modified, and distributed — part of a broader push toward traceability in AI supply chains.

Read more: Cisco

RadixArk launches with $100M

New startup RadixArk has launched with $100 million in seed funding to expand SGLang, the fast-growing open-source inference framework for large language models. The company says it wants to “democratize frontier AI infrastructure.”

Read more: Business Wire

CopilotKit raises $27M for app-native AI agents

Open-source AI agent framework CopilotKit has raised $27 million to help developers build app-native agents directly into their own software, rather than relying on standalone chatbots and hosted assistants.

Read more: TechCrunch

DeepInfra raises $107M for open-model inference cloud

DeepInfra has raised $107 million to build dedicated cloud infrastructure for serving open-source AI models, betting demand for inference outside the hyperscalers will continue growing.

Read more: Silicon Angle

<Final commit>

A healthy approach to wearable data…

Open Wearables, an open-source health intelligence platform built by healthtech studio Momentum, has released open-source scoring algorithms for wearable data, starting with sleep and resilience metrics typically locked behind platforms like Whoop and Oura.

The system connects data sources including Strava, Garmin, Apple Health, and Google Health Connect through a unified API, while also providing an AI reasoning layer for analysing trends and health signals. The broader pitch is that health scoring — and increasingly AI interpretation of wearable data — should be transparent and auditable.

Read more: Fitt/Insider

This week’s lead story looks at a widely used open-source package being compromised through its own release process, after attackers slipped a malicious update into a trusted distribution channel.

Elsewhere, a new crop of tools and funding rounds points to growing momentum around AI agents and the infrastructure that supports them, while governments and developers continue to rethink their reliance on dominant platforms — from sovereign Git hosting in Europe to high-profile departures from GitHub itself.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

Hackers weaponize trusted update

A widely used open-source package with more than 1 million monthly downloads was compromised after attackers hijacked its release process and pushed a malicious update.

The package, elementary-data, was briefly distributed with credential-stealing code that searched systems for sensitive data including cloud keys, API tokens, SSH keys, and warehouse credentials. The malicious version — 0.23.3 — was live for around 12 hours before being pulled.

The attack didn’t rely on tricking users into installing something obviously suspicious. Instead, the attacker exploited a vulnerability in a GitHub Actions workflow used by the project’s maintainers. By submitting a malicious pull request, they were able to execute code inside the developers’ environment, extract signing keys and tokens, and publish a compromised release that appeared legitimate.

“Users who installed 0.23.3… should assume that any credentials accessible to the environment where it ran may have been exposed,” the Elementary team warned.

The incident follows a well-trodden path. Rather than targeting the codebase itself, attackers are going after the systems that build and ship it. In this case, the release pipeline — the automated process that builds the software, signs it, and publishes updates — became the point of entry.

For maintainers, that creates a difficult problem. Code is reviewed and tested, but CI pipelines — often less scrutinised and holding the keys to production — are easier to get wrong and far more damaging if compromised.

Read more: Ars Technica | Elementary

<Patch notes>

Paper Compute wants to fix AI agent infrastructure

GitHub veteran Brian Douglas recently launched Paper Compute, an open-source startup building infrastructure for AI agents, starting with Tapes (observability) and StereOS (a hardened OS for sandboxed agent execution).

Read my interview with Brian in the link below.

Read more: The New Stack

Netherlands launches ‘sovereign’ GitHub alternative

The Dutch government has soft-launched code.overheid.nl, a self-hosted Git platform for public bodies built on Forgejo, a European alternative to GitHub.

Read more: Digital Government | Code.Overheid

Hashicorp co-founder quits GitHub

Mitchell Hashimoto is moving his Ghostty terminal project off GitHub after near-daily outages. "GitHub is no longer a place for serious work," he wrote, after 18 years on the platform.

Read more: The Register

Warp goes open source

AI coding startup Warp is open-sourcing its client, betting a community managing AI agents can outpace well-funded closed rivals. OpenAI is a founding sponsor.

Read more: Tessl

OpenAI open-sources Symphony

OpenAI this week released Symphony, an open source specification for orchestrating coding agents. The project connects issue trackers such as Linear to Codex-powered agents, allowing each task to run as its own self-contained job, from assignment through to a pull request.

Read more: Tessl

Vendor lock-in drives OSS adoption?

The 2026 State of Open Source Report is out! Vendor lock-in is now cited by 55% of organisations as a primary driver of OSS adoption — a 68% year-over-year jump — while security and maintenance remain the biggest operational challenges.

Read more: The Open Source Initiative (OSI) | Perforce Open Logic

OpenAI releases local PII filter

OpenAI’s new Privacy Filter model detects and redacts personally identifiable information (PII) on-device, supporting up to 128k tokens in a single pass.

Read more: The New Stack | OpenAI | Hugging Face

Cursor partners with Chainguard to secure AI-built code

Cursor is routing dependencies through Chainguard's verified package repositories, addressing the risk of agents pulling compromised libraries at a pace no security team can review manually.

Read more: Tessl

Intel shutters its open-source evangelism program

As part of its ongoing “open-source rethink,” Intel has archived its Open Ecosystem Community/Evangelism initiative alongside a wave of GitHub repositories, marking a significant retreat from its decades-long role as a major open-source contributor.

Read more: Phoronix

DeepSeek V4 arrives with Huawei chip support

DeepSeek's most significant release since R1 comes in Pro and Flash variants with a 1M token context window, and is the first model optimised for domestic Chinese chips.

Read more: MIT Technology Review

Cloudsmith raises $72M

Belfast-based artifact management platform Cloudsmith has raised a $72 million Series C led by TCV and Insight Partners, targeting enterprises managing AI-generated code at scale.

Read more: Cloudsmith

ComfyUI raises $30M at $500M valuation

Open-source AI workflow platform ComfyUI has raised $30 million at a $500 million valuation. The company now claims 4 million users and 150,000 daily downloads.

Read more: GlobeNewswire

<Final commit>

Microsoft digs up the bones of DOS

On the 45th anniversary of 86-DOS 1.00, Microsoft has published what appears to be the earliest-known DOS source code — hand-annotated assembler printouts preserved by Tim Paterson, the original author of DOS. Think scanned listings, handwritten notes, and the kind of artifacts that you might find in an archaeological dig.

Microsoft describes them as “a printed commit history of a Git repository” — a stack of paper that tracks which features were added when, what broke, and how it got fixed. The materials include the 86-DOS 1.00 kernel, development snapshots of PC-DOS 1.00, and utilities like CHKDSK. Soon, the physical originals will be on display at the Interim Computer Museum, donated by Paterson himself.

Read more: Microsoft

This week’s lead story looks at Cal.com moving its core codebase behind closed doors, as the company argues that AI-driven vulnerability discovery is making open development harder to defend.

Elsewhere, Expo hires Meta’s former React lead as it raises fresh funding and launches a new agent for building mobile apps; France pushes ahead with plans to move public systems from Windows to Linux; and a mix of security issues, new tools, and governance updates continue to shape the open-source ecosystem.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

Cal.com draws a line under open source

AI is putting new pressure on open source. Maintainers are already battling a surge of machine-generated “AI slop,” but the bigger challenge might be just beginning: tools that can scan codebases and surface vulnerabilities at scale.

Last week I reported on Anthropic’s Claude Mythos and Project Glasswing, and the rise of AI systems that can hunt for vulnerabilities in widely used software. This week, Cal.com, an open-source Calendly alternative that provides scheduling infrastructure for developers, is pushing its core codebase behind closed doors.

Cal.com has moved its main production codebase into a private repository, while releasing a stripped-down, MIT-licensed community version called Cal.diy for self-hosting.

CEO Bailey Pumfleet argues that openness now comes with a cost. He said access to source code lowers the barrier to finding weaknesses. “It’s easier to perform a bank heist if you have the blueprints to the vault,” Pumfleet said. “It’s a lot easier to see the inner workings of something and reverse engineer it to find a vulnerability.”

Asked whether stronger hardening could offset the risk, Pumfleet said: “Simply having the code open increases the risk dramatically.

“It’s not closing the code or hardening it; it’s just that we’re doing both,” he continued. “Simply hardening it does not decrease the risk enough.”

The argument arrives as tools like Mythos have shown they can uncover vulnerabilities that sat undetected for decades, including a flaw in OpenBSD dating back 27 years.

Not everyone accepts this logic, however. Critics argue that closing code reduces the number of people who can find and fix bugs, and that security depends on scrutiny rather than secrecy. Others suggest the move reflects commercial pressure dressed up as a security decision.

Developer Simon Willison pointed to recent analysis by Drew Breunig, which argues that AI-driven vulnerability discovery raises the cost of securing software for everyone — and that open source helps spread that burden across a wider pool of contributors, rather than concentrating it within a single company.

Pumfleet, for his part, agrees with this view, but said that it all comes down to a question of resources. He said approaches that rely on continuous, large-scale analysis would require budgets Cal.com doesn’t have, adding that closing the codebase is “the biggest method of risk reduction we can take right now to secure our customers.”

There is also a longer history behind such actions. Companies built on open source have frequently restricted access to parts of their codebases — whether through licensing changes, enterprise carve-outs, or fully closing core components. That context has led some critics to question whether security is the sole driver here, or whether it also serves as a justification for tighter control.

Pumfleet rejects that framing. “The decision is entirely about security,” he said. “We already have control over the product being open source, and we don’t really stand to gain much from being closed source. It’s really just a question about de-risking on the security side.”

Read more: The New Stack | Cal.com | Drew Breunig

<Patch notes>

Expo hires Meta’s React lead, launches agent, nabs $45M

Open-source React Native development platform Expo has hired Meta’s former React lead Seth Webster, who most recently emerged as executive director of the all-new React Foundation after Meta donated the project.

In tandem, Expo also announced $45 million in funding and the launch of Expo Agent. Expo sits on top of React Native, handling much of the infrastructure needed to ship apps, and it’s now pushing into agent-driven development by combining code generation with deployment and testing.

Read my interview with Seth Webster for The New Stack on the link below.

Read more: The New Stack

France ditches Windows for Linux

In yet another sovereign tech push from Europe, France is moving public sector systems off Windows and onto Linux to reduce reliance on US tech vendors.

Read more: TechCrunch

EU age-checking app already cracked

The EU is rolling out an open-source age verification app, but hackers say they broke it in minutes. It raises questions about whether these systems can actually protect kids—or just create new risks.

Read more: European Commission | Politico

Backdoors found in WordPress plugins

Dozens of WordPress plugins used by thousands of sites were found with hidden backdoors.

Read more: TechCrunch

Microsoft shares Surface data with Linux Foundation

Microsoft is handing over key Surface device data to the Linux Foundation’s Battery Data Alliance to help improve battery life on Linux.

Read more: TechRadar

Nvidia launches quantum-focused AI models

Nvidia unveiled new open models aimed at accelerating quantum computing research.

Read more: Tom’s Hardware | Nvidia

Mozilla launches Thunderbolt AI client

Mozilla has launched a new AI client called Thunderbolt, focused on running models locally or in self-hosted setups. The pitch is tighter control over data and infrastructure, aimed at developers and teams who don’t want to rely on hosted AI services.

Read more: Ars Technica | Thunderbolt

Vercel open-sources AI agent framework

Vercel released Open Agents, a toolkit for building custom AI coding agents. The idea is to let companies run their own agents on their own infrastructure, rather than relying on hosted tools.

Read more: Tessl

Laude’s moonshots

Laude Institute, a nonprofit funding critical open research, has unveiled eight academic teams as finalists in its new “Moonshots” program. The groups are working in the open and will compete over the next six months for $10M lab-scale funding to help solve “humanity’s hardest problems.”

Read more: Laude Institute

OSI names new executive director

The Open Source Initiative (OSI) has appointed Duane O'Brien as executive director, some six months after his predecessor Stefano Maffulli announced he was stepping down.

Read more: The Open Source Initiative

<Final commit>

Linux allows AI! But not the sloppy kind…

Linux 7 landed this week, bringing the usual mix of hardware support updates, performance tweaks, and under-the-hood changes that keep the kernel ticking.

However, arguably the more interesting facet was a little tidbit that came alongside it: a new policy on AI-assisted contributions to the kernel. AI tools are officially allowed, but with important caveats.

AI agents mustn’t add “Signed-off-by” tags, with only humans able to legally certify the Developer Certificate of Origin (DCO).

As per official documentation, the human submitter is responsible for:

• Reviewing all AI-generated code

• Ensuring compliance with licensing requirements

• Adding their own Signed-off-by tag to certify the DCO

• Taking full responsibility for the contribution

Put simply, AI is allowed, but no slop.

Read more: The Register | GitHub

This week’s lead story looks at Project Glasswing, an effort to bring frontier AI security tools into the hands of open-source maintainers (though not exclusively), as models like Anthropic’s Claude Mythos begin to uncover vulnerabilities that have gone undetected for decades.

Elsewhere, there’s a continued push toward open messaging infrastructure in Europe, new tools to secure AI agents, and a mix of projects and platforms shaping how open infrastructure is built and governed, and more.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

Glasswing brings frontier AI to open source security

Anthropic says its shiny new, cutting-edge Claude Mythos model has reached a level of coding and security capability where it can find and exploit software vulnerabilities that survived years — and in some cases decades — of human review.

While the ramifications of this are far-reaching, Mythos is a big deal for the open source world in particular. Through Project Glasswing, the Linux Foundation, Anthropic, and a group of large tech companies including Amazon, Apple, Google, and Microsoft are putting Mythos to work on defensive security across critical software systems, including widely used open-source projects.

Anthropic is committing up to $100 million in usage credits to the effort, alongside $2.5 million for Alpha-Omega and OpenSSF through the Linux Foundation, plus $1.5 million for the Apache Software Foundation.

“Open source security has historically been a thankless task,” The Linux Foundation’s CEO Jim Zemlin wrote. “Triaging and fixing bugs, writing and testing patches, crafting careful communications strategies – none of this is what maintainers had in mind when they sent their first project commit. We believe AI can help address this.”

Open source underpins much of the modern software stack, but many maintainers are already overwhelmed by bug reports, supply chain attacks, and AI-generated noise. Now they may also have to contend with AI systems that are exceptionally good at surfacing zero-days.

To underscore this point, Anthropic published a handful of examples. Mythos, it said, found a flaw in OpenBSD, a security-focused operating system, dating back 27 years.

In short, Glasswing isn’t just about AI helping create patches a bit faster. It’s about getting frontier defensive capability into the hands of maintainers before the same class of models is used more aggressively elsewhere.

Zemlin stressed that access — not just capability — will determine whether these tools actually help the open-source ecosystem.

“Because the dark side of AI-augmented security is AI-augmented insecurity, we must ensure that access to the best AI cybersecurity tooling is evenly distributed and not concentrated in the hands of the few with the cash and the headcount,” Zemlin noted. “None of this matters if the cost is prohibitive. Project Glasswing is designed to ensure that maintainers get access to these tools for free. This is the only way to foster wide adoption of top AI cybersecurity capabilities – by removing any economic friction.”

Read more: The New Stack & The Linux Foundation & Glasswing & Mythos Preview

<Patch notes>

A ‘beam of light’ for EU sovereignty

Belgium is rolling out a Matrix-based messaging app for government use, in a push toward digital sovereignty. The move leans on open protocols to reduce reliance on proprietary communication platforms.

Read more: Resilience Media

Microsoft open-sources agent security toolkit

Microsoft released the Agent Governance Toolkit, an open-source runtime security layer for AI agents. The project focuses on monitoring behaviour and enforcing guardrails as agents take on more tasks autonomously.

Read more: Microsoft & GitHub

A ‘spiritual successor to WordPress’

Cloudflare has unveiled Emdash, a new open-source CMS positioned as a modern, serverless successor to WordPress. WordPress co-creator Matt Mullenweg said the project was likely designed to drive usage of Cloudflare’s own services, though overall he was complementary of the project.

Read more: Cloudflare & GitHub & Matt Mullenweg

Google releases Gemma 4

Google has launched Gemma 4, the latest version of its open model family aimed at developers. The release continues Google’s push to provide smaller, more accessible models alongside its closed systems.

Read more: Google

Netflix goes into the VOID

Netflix has released VOID, an open-source model that removes objects from video — including their effects on the scene, such as shadows, reflections, and physical interactions. The model builds on CogVideoX and is fine-tuned for interaction-aware video editing in post-production.

Read more: Forbes & VOID (GitHub)

Meta shifts on open models

Meta this week introduced Muse Spark, its first frontier model and the first without open weights, marking a break from its earlier approach. The company says it still plans to release some models openly, though questions remain over how far that commitment will go.

Read more: Meta & Axios & The New Stack

Microsoft deactivates dev accounts

Microsoft deactivated two notable open source developer accounts as part of a new developer verification program, raising concerns about access and control over software distribution platforms. The move highlights ongoing tension between platform governance and open development.

Read more: The Register

<Final commit>

A DIY retro camera

An open-source camera project called Saturnix is gaining a little steam, built around a Raspberry Pi with a 16MP sensor and styled after point-and-shoot cameras from the 1990s.

It’s not a finished product you can buy. Instead, the creator has published the design files, code, and instructions, so users assemble it themselves using off-the-shelf parts like a Raspberry Pi, camera module, and custom 3D-printed case.

The appeal is in that setup: the software can be modified, and the hardware can be rebuilt or adapted as needed. It’s still early, but it offers a glimpse of what open hardware can look like when the full stack — from casing to code — is available to the user.

Read more: Hackaday & GitHub

This week’s lead story looks at the launch of Betterleaks, a new open-source secrets scanner from the creator of Gitleaks, and what it says about how security tooling — and ownership — is evolving in the AI era.

Elsewhere, China is pulling ahead on open AI models much to the chagrin of the US; Google expands Android Automotive deeper into the car stack; Cisco rolls out a new open-source tool to secure AI systems; and a fresh round of donations and project graduations points to continued momentum in open infrastructure and governance.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

Secrets scanning for the agentic era

Gitleaks is one of the most popular open-source secret scanning tools, ratcheting up more than 25,000 GitHub stars and tens of millions of downloads since its launch in 2018.

Now, Gitleaks creator Zach Rice is starting afresh with Betterleaks, a new open-source scanner designed to catch exposed credentials — API keys, tokens, passwords — as code is written and shared.

So… why launch a new thing when the old thing was seemingly doing so well? The answer traces back to Rice’s move to Truffle Security in 2023, where his focus shifted to rival open-source scanner TruffleHog. Development on Gitleaks slowed, he said, and Rice no longer had full control over the project.

Betterleaks is positioned as a continuation — a drop-in replacement, with existing commands and configurations still working, but with a reworked detection approach, faster scanning, and more flexibility over how secrets are identified and validated.

Rice says the goal is to keep moving development forward without forcing the existing community to migrate.

“Hopefully it’s not going to cause too much of a backlash to the community – I love the Gitleaks community, and I don’t want to fracture that,” Rice told me in an interview for The New Stack this week. “So if you want to continue using Gitleaks, feel free. It’s stable — and security patches and stuff like that, I’ll continue to do. But if you want the next generation of Gitleaks and the evolution, then switch to Betterleaks.”

Betterleaks is also being built with AI-assisted development in mind. As more code is generated quickly — often with less review — the risk of accidentally exposing credentials increases.

The project is sponsored by Aikido, a billion-dollar security startup that’s backing a broad array of open source security tooling, including OpenGrep, Zen, and Safe Chain.

Betterleaks, for its part, is available under an MIT license, with Rice retaining ownership. It’s also worth noting that there are no plans to build a commercial entity off the back of Betterleaks — the focus, instead, is on building and maintaining a tool that others can rely on, even competitors.

“Like what Aikido did with OpenGrep (forked Semgrep) we’re dedicated to providing really great open source projects for the security community,” Rice said. “A strong open source project is the backbone of a lot of the security products out there. Yes, it’s beneficial to other companies, but it’s also really beneficial to Aikido to have these stable projects.”

Read more: The New Stack

<Patch notes>

China leads on open AI models

As per a recent report from Hugging Face, Chinese AI labs are leading on open AI models — though not the infrastructure behind them (that’s Nvidia) — with data showing they dominate downloads and usage globally. In turn, this is raising concerns among US policymakers that China’s warm embrace of open AI models could erode the US’s lead in AI development.

Read more: The New Stack & Hugging Face & SCMP

Android Automotive moves beyond infotainment

Google is expanding its Android Automotive OS to handle more of the car’s internal systems beyond infotainment, as vehicles shift toward software-defined architectures.

Read more: The Verge

Cisco launches DefenseClaw

Cisco this week introduced DefenseClaw, an open-source tool for monitoring AI agents and detecting issues like prompt injection and unsafe tool.

Read more: Cisco

Fivetran donates SQLMesh to Linux Foundation

Data integration giant Fivetran has donated SQLMesh, its open-source data transformation framework, to the Linux Foundation.

Read more: The New Stack

Tekton and Fluid move up at CNCF

Tekton, a Kubernetes-native CI/CD framework, and Fluid, a data orchestration system for AI and big data workloads, have both been promoted to incubating status by the Cloud Native Computing Foundation (CNCF).

Read more: CNCF and CNCF

<Final commit>

Built on open, sold as new

AI coding company Cursor last week launched Composer 2, an AI model designed to handle longer programming tasks at lower cost.

However, arguably the more interesting detail is that it’s built on Kimi K2.5, an open model from Chinese AI company Moonshot AI. This helps demonstrate how smaller players can build competitive products without training frontier systems like those from OpenAI, Anthropic, or Google.

That detail only emerged after developers dug into the system, prompting criticism over how the underlying model was credited (or not) — a long-running tension in the open source sphere.

It’s a reminder that open models are changing who is able to compete, while raising fresh questions about who gets the credit.

Read more: Tessl & VentureBeat

This week’s lead story looks at OpenAI’s move to acquire Astral, the company behind popular open-source Python tools Ruff and uv, as it continues to pull widely used developer tools and viral projects into its orbit.

Elsewhere, there’s fresh funding for open-source security, growing corporate interest around OpenClaw, and a lot more.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

OpenAI’s Astral projection

OpenAI this week announced plans to acquire Astral, the company behind widely used open-source Python tools including Ruff and uv. The plan is to fold Astral into OpenAI’s Codex team, which builds the company’s AI coding agent, and connect Codex “more directly with the tools developers already use.”

Astral has built a following by replacing slower, fragmented Python tooling with faster, unified alternatives. Ruff acts as a high-speed linter and formatter, while uv rethinks package management and environments — both designed to speed up day-to-day development.

The deal gives OpenAI a foothold in the tooling developers actually use when writing and running code, far beyond the model layer.

The move follows OpenAI bringing in the creator of OpenClaw, the viral open-source agent that spread quickly as developers forked and adapted it. It also comes alongside a separate deal for Promptfoo, an open-source testing tool.

While OpenAI mostly abandoned its open-source roots a long time ago, these recent deals are a tacit acknowledgement of the power of open source — and the communities that drive it.

Astral’s tools have grown rapidly these past few years, reaching hundreds of millions of downloads per month and becoming a mainstay of modern Python development. Founder and CEO Charlie Marsh said that growth exceeded expectations.

“Open source is at the heart of that impact and the heart of that story; it sits at the center of everything we do,” Marsh wrote. “In line with our philosophy…. OpenAI will continue supporting our open source tools after the deal closes. We'll keep building in the open, alongside our community – and for the broader Python ecosystem – just as we have from the start.”

Read more: OpenAI & Astral

<Patch notes>

$12.5M for open source security

The Linux Foundation has secured $12.5 million in new funding from major tech firms — including Anthropic, AWS, GitHub, Google, Google DeepMind, Microsoft, and OpenAI — to support open-source security projects. The effort targets long-standing gaps in maintaining widely used but under-resourced infrastructure.

Read more: Press release

Germany backs open document standards

Germany’s sovereign digital stack will mandate the Open Document Format (ODF) — an open, standardised file format used by office suites like LibreOffice — reinforcing a shift away from proprietary file formats in public sector systems. The move aims to improve interoperability and reduce vendor lock-in.

Read more: The Document Foundation

MCP maps next steps

The folks behind the Model Context Protocol (MCP) have outlined a set of priorities for 2026, including better support for remote servers, improved scaling, and clearer agent-to-tool communication — all designed to make it easier for agents to connect reliably to external tools and data.

Read more: The New Stack

Tencent backs OpenClaw after copycat complaint

Chinese tech giant Tencent has moved to sponsor OpenClaw after complaints from its creator Peter Steinberger about copycat projects.

Read more: SCMP

Chainguard bolsters software supply chain

Software supply chain security company Chainguard has launched a central repository of hardened open-source packages and container images, designed to reduce risks in dependencies.

Read more: The New Stack

OpenClaw gets guardrails

After Nvidia CEO Jensen Huang called OpenClaw “the next ChatGPT,” Nvidia has introduced a project dubbed Nemoclaw to add guardrails to the open-source agent. The effort reflects growing interest in making autonomous systems safer for more serious enterprise deployment.

Read more: The New Stack

<Final commit>

A browser built for bots

Open-source headless browser Lightpanda this week added support for Web Bot Auth, a protocol designed to let automated agents securely identify themselves and access websites without being treated as malicious traffic.

The project itself isn’t new. Lightpanda has been around since 2022, but is gaining attention as developers seek infrastructure built for AI systems. It’s a browser written from scratch for machines, rather than humans — no rendering engine, just the parts needed to load pages and run JavaScript.

That stripped-down design makes it far lighter than Chrome, which still carries decades of features meant for people. Lightpanda remains in beta, but with strong early traction and a growing star count, it’s looking like a serious attempt to rebuild a core piece of the web stack for agents.

Read more: Linuxiac & Lightpanda & GitHub

This week’s lead story looks at Nvidia’s reported $26 billion push into open-weights AI models, a move that would see the chip giant wade further into the software layer of AI while reinforcing the hardware ecosystem that made it dominant.

Elsewhere, there’s new research warning that hidden “Trojan” behaviours could be embedded inside AI models during training, raising fresh questions about security in the growing open model ecosystem — along with a round-up of funding, infrastructure, and open-source projects shaping the wider developer landscape.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

Nvidia joins the open-weights race

Nvidia plans to invest heavily in developing open-weights AI models in the coming years, a move that would push the chip giant deeper into the software side of artificial intelligence (AI).

The company has already cemented its position in AI infrastructure through CUDA, a proprietary parallel compute platform designed to help developers extract more performance from Nvidia GPUs. Over time, it has become a core part of the AI development environment, giving researchers and companies tools built specifically for Nvidia hardware.

Now, it appears ready to pursue a similar strategy with open-weights models.

Nvidia intends to put some $26 billion toward building these models over the next five years. Moving further into model development would give Nvidia more direct control over how next-generation AI systems are built, tested, and deployed alongside its chips.

Developers who fine-tune, adapt, or deploy models designed with Nvidia systems in mind are more likely to run those workloads on the company’s GPUs. Model development becomes another layer reinforcing the hardware ecosystem underneath it.

Most of the leading AI systems today remain proprietary, operated behind paid APIs by major labs including OpenAI, Google, and Anthropoic. Models with “open weights” take a different approach: the trained parameters are released so developers can run and modify the model themselves. That doesn’t necessarily make them open source, though, which would also include publishing the training code, data, and full methodology.

At any rate, the timing reflects the rising cost of building advanced AI systems. Training frontier models now demands vast computing resources and infrastructure investments measured in billions of dollars.

For Nvidia, encouraging more organisations to experiment with open-weights models could expand the number of teams building and running AI systems. And each new model trained or deployed ultimately feeds demand for the computing power required to run them.

Read more: The Motley Fool & Wired (paywall)

<Patch notes>

Hidden ‘trojans’ in AI models?

Researchers warn that AI models can carry hidden “Trojan” behaviours inserted during training, lying dormant until triggered by specific inputs. The risk is especially relevant in the open model ecosystem, where developers often download and reuse pre-trained models that may already contain those backdoors.

Read more: Resilience Media

AWS backs open VS Code registry

Open VSX — the open-source extension registry used by VS Code alternatives — has passed 300 million monthly downloads, with AWS and AI coding editor Cursor providing new investment. The funding helps keep the registry running as shared developer infrastructure outside Microsoft’s proprietary marketplace.

Read more: The New Stack

MariaDB bets on Apache Ignite

MariaDB plans to acquire GridGain, the company behind the in-memory computing platform built around the open-source Apache Ignite project. The move signals a bet that faster, memory-centric data infrastructure will be needed as AI systems demand real-time access to large datasets.

Read more: The New Stack

OpenTitan lands in Chromebooks

OpenTitan — the open-source hardware root of trust backed by Google — is now shipping in commercial Chromebooks after seven years of development. The chip’s design is fully open, allowing companies to inspect or even manufacture the security hardware themselves rather than relying on proprietary silicon.

Read more: Google

OpenAI snaps up Promptfoo

OpenAI plans to acquire Promptfoo, a platform used to test and secure AI systems before deployment. The company said Promptfoo’s open-source CLI and evaluation tools will continue to be developed even as its technology is integrated into OpenAI’s enterprise AI platform.

Read more: OpenAI

OpenAI and Anthropic court maintainers

OpenAI and Anthropic are battling for the best open source maintainers through new support programs, aiming to get their coding assistants embedded in widely used projects. The programs are perhaps less charity than strategy: winning over maintainers means influencing the developer tools many other engineers rely on.

Read more: The New Stack

A portal to another dimension

The United Nations (UN) has launched a new Open Source Portal designed to catalogue software projects built across the UN system. The platform aims to encourage reuse between agencies and connect UN-developed code with the wider open-source community.

Read more: LinkedIn & UN Portal

Qdrant raises $50M for open vector search

Open-source vector search engine Qdrant has raised $50 million in Series B funding to expand its infrastructure for production AI systems. The Rust-built project, already widely used for AI retrieval workloads, has surpassed 250 million downloads and continues to grow through its open developer community.

Read more: Press Release

Unleash raises $35M for open feature flags

Open-source feature management platform Unleash has raised $35 million in Series B funding to expand its “FeatureOps” tooling. The project — with more than 40 million downloads and 13,000 GitHub stars — aims to help companies control AI-accelerated software releases using open feature flags and runtime kill switches.

Read more: The New Stack

Don’t give up the Ghost…

Open-source publishing platform Ghost has passed $10 million in annual recurring revenue, founder John O’Nolan said. The bootstrapped non-profit foundation says publishers using the platform have now earned about $130 million collectively.

Read more: John O’Nolan (LinkedIn)

<Final commit>

WordPress, minus the server

WordPress has launched my.WordPress.net, a private workspace where you can spin up a personal WordPress environment instantly in the browser.

The secret sauce lies in WordPress Playground, the open-source project that runs the whole stack client-side and can launch a full WordPress install with a single click — no hosting, database setup, or server required.

Read more: TechCrunch & My.Wordpress

This week’s lead story looks at mounting opposition to Google’s planned Android developer verification regime, as free software advocates and civil society groups warn that mandatory registration for all apps on certified devices would extend the company’s gatekeeping power far beyond the Play Store.

Elsewhere, I look at the Open Source Endowment, Laude’s latest open research bets, OpenAI’s move beyond saturated coding benchmarks — and more.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

Android ID rules face growing opposition

Opposition to Google’s planned Android developer verification regime is gaining steam, with a broad coalition of developers and free software advocates putting their names to an open letter published this week.

The letter challenges Google’s announcement last August that anyone developing Android apps will need to register centrally with Google — paying a fee, agreeing to its terms, providing government ID, disclosing signing key details, and listing current and future application identifiers.

While Google already had a verification programme in place for apps distributed through the Google Play store, the latest development applies to all certified Android devices, regardless of whether apps are distributed via third-party app stores, directly from a developer’s own website, through enterprise deployment systems, or installed manually via sideloaded APK files.

Google, for its part, positions the move squarely as a security measure. The company says “you shouldn’t have to choose between open and secure,” citing data that found “over 50 times more malware from internet-sideloaded sources than on apps available through Google Play.” The new verification layer, it says, is designed to prevent repeat bad actors from exploiting anonymity — an “ID check at the airport,” in Google’s analogy — rather than a review of app content.

The critics, however, aren’t convinced. The letter argues that the policy “extends Google’s gatekeeping authority beyond its own marketplace into distribution channels where it has no legitimate operational role,” warning that centralising registration of all Android applications would give Google “newfound powers to completely disable any app it wants to, for any reason, for the entire Android ecosystem.”

Among the signatories are civil society groups, nonprofits, and technology organisations spanning the free software and digital rights communities. This includes the Software Freedom Conservancy (SFC), which goes further, suggesting that Google’s move is less about security than it is about extending platform control — part of a broader trend of large tech companies tightening control over how software is installed and distributed.

The SFC writes:

Free and open source software (and the ability to install it!) was vital for the proliferation of Android. A reversal of such a critical piece of the policy that allowed user freedom and software openness would be disastrous for users and the FOSS community at large.

There is obviously pressure from big tech companies to restrict installation options on their locked down hardware. We see this not only in the mobile space, but increasingly on desktops where both Apple and Microsoft have made it harder to install free software; refusing to allow distribution outside of their app stores, or showing vague warnings about security when software isn't signed in their preferred gatekeeping ways.

Allowing installation of free software is absolutely necessary to ensure freedom to keep our devices running, protecting user and developer privacy, and keeping an open market of innovation.

Assuming the letter falls on deaf ears, the changes will roll out in stages. Early access began in October 2025, verification opens broadly in March 2026, and from September 2026 the requirement will apply to certified Android devices in Brazil, Indonesia, Singapore, and Thailand — with global expansion planned from 2027 onward.

Read more: Keep Android Open (letter) & SFC (letter)

<Patch notes>

Open Source Endowment funds critical OSS

A newly launched Open Source Endowment uses a university-style endowment model to fund critical but under-resourced open-source projects, investing donations into a low-risk portfolio and spending only the returns. Backed by a slew of founders and leaders including Thomas Dohmke (former GitHub CEO) and Mitchell Hashimoto (HashiCorp), it aims to address perennial maintainer funding gaps with perpetual financial support.

Read more: TechCrunch & Open Source Endowment

The Laude giveth

In my Open Profile segment this week, I took an early look at Laude Institute’s second Slingshots cohort — a batch of 14 upstream open AI research projects. They range from agent evaluation frameworks to energy measurement tooling and continual-learning benchmarks, and are backed with funding, compute, and operational support.

Read more: Forkable

Benchmark saturation drives OpenAI to pivot

OpenAI says it will stop reporting scores on SWE-bench Verified — the popular coding benchmark — because scores have clustered near the top, in part due to the public data used to build the test leaking into model training sets. Because SWE-bench tasks come from widely used open source repos, models increasingly memorize solutions instead of demonstrating general problem-solving, undermining the benchmark’s usefulness. OpenAI is now recommending SWE-bench Pro instead, designed to reduce contamination and better reflect real world software engineering capability.

Read more: Tessl

Cloudflare clones Next.js using AI

Cloudflare launched Vinext, an AI-built web framework based on the open source Next.js project, rebuilt to run directly on Cloudflare’s Workers platform. This prompted Ghost founder and CEO John O’Nolan to ponder: if anyone can direct AI toward an open source codebase and have it rewritten from scratch — without copying the original code — what do software licenses actually protect?

Read more: Cloudflare & John O’Nolan

OnlyOffice is ‘fake open source,’ says The Document Foundation

The Document Foundation, the steward of LibreOffice, has accused OnlyOffice of being “fake open source,” arguing that its close collaboration with Microsoft and embrace of OOXML reinforce vendor lock-in rather than genuine software freedom.

Read more: Neowin & The Open Document Foundation

React gets its foundation

We knew it was happening, but Meta made official its plan to move React into a dedicated foundation under the Linux Foundation, shifting legal stewardship away from a single corporate owner.

Read more: React

Apple acquires open photonics project

Apple has acquired Invrs.io, effectively a one-person company building open-source tools for AI-guided optics and photonics design, including shared design challenges and a public leaderboard.

Read more: MacRumors & European Commission

IronCurtain targets AI agent risk

Esteemed researcher and security engineer Niels Provos this week announced IronCurtain, an open source personal AI assistant built secure from the ground up. It runs your agent inside a sandbox and enforces user-defined policy on filesystem, network and git access.

Read more: Help Net Security & IronCurtain

<Final commit>

Time capsule brings ‘94 Linux back

CDE Time Capsule is an open source Progressive Web App that recreates a 1994 Debian Linux desktop in your browser. It faithfully restores the Common Desktop Environment (CDE), the Unix interface widely used before GNOME and KDE, complete with period tools like Netscape and XEmacs.

Read more: Tom’s Hardware & CDE Time Capsule & GitHub

Last year, I worked with the folks at Laude Institute to write a feature piece around the launch of Terminal-Bench, an open source benchmark designed to measure how well AI agents complete real-world tasks in live terminal environments. The project quickly became the industry standard for evaluating agent performance, cited by major frontier model providers and adopted across the research community.

Laude Institute, co-founded by Databricks co-founder Andy Konwinski, backs upstream AI research with an emphasis on work that is built and released openly. Terminal-Bench was, in fact, part of a broader program run by the institute called Slingshots — an initiative that provides early-stage researchers with funding, compute, and operational support to ship ambitious work into the open. The first cohort included projects spanning benchmarks, frameworks, and agent tooling, several of which have since evolved into widely used infrastructure or spun out into companies.

While the nature of the projects vary, two key facets will generally hold true: AI will be a central ingredient, and qualifying projects will follow an entirely “open” ethos.

“Laude Institute is ‘open everything’ — open model, open weights, open source, open discourse, open publications,” Konwinski explained to me in an interview last year.

Now, Laude is announcing its second Slingshots cohort, a new batch of very early-stage projects tackling agent evaluation, continual learning, energy measurement, model architectures, and reinforcement learning systems.

Read the story in full below.

Building durable AI research in the open

AI research moves quickly, but most early-stage ideas stall before they’re widely adopted. Laude Institute’s Slingshots program is designed to intervene at that embryonic stage, backing “upstream projects” with funding, compute, and operational support to help teams ship their work.

The projects themselves can take many forms. Internally, Laude tracks them across categories spanning datasets, benchmarks, architectures, algorithms, models, agents, frameworks, and applications — a reflection of how wide the AI research stack has become.

Laude and its Slingshots program function re like a research accelerator (rather than a startup incubator), with teams selected based on potential impact to the field, rather than any specific commercial milestone. Most projects originate in leading academic labs, often from PhD researchers and faculty working at the edge of the field. And notably, Laude deploys resources quickly — in some cases within hours — allowing teams to accelerate promising lines of research.

“Success for these projects looks like adoption and users, rather than papers or citations,” Braden Hancock, research partner at Laude Institute and a Stanford PhD, told Forkable over email. “We’re looking for research that will be used.”

That philosophy is visible in how the first Slingshots cohort evolved. Terminal-Bench — developed through collaboration between researchers at Stanford and Laude — became a reference benchmark for evaluating AI agents operating in the command line. DSPy, meanwhile, grew into a widely adopted framework for programming language models. More recently, Harbor — part of Slingshots’ second batch — emerged as a broader agent evaluation framework building on ideas first explored in Terminal-Bench, with overlapping contributors.

“One thing we’ve been happy to see is a compounding effect, with projects in subsequent batches building on open infrastructure and insights from previous ones,” Hancock explained.

He said he expects that pattern to continue, with later cohorts building directly on infrastructure created in earlier ones. Harbor, as noted, extends work first explored in Terminal-Bench, while a forthcoming batch 3 will likely include a new benchmark designed to run on Harbor. From the first cohort, DSPy, is also now followed by Arbor, a reinforcement learning layer for DSPy, and BetterTogether, which combines DSPy prompt optimization with weight updates. Meanwhile, one of the current top-performing approaches on ARC-AGI-3 — another batch one project — comes from a company using RLMs (Recursive Language Models), included in batch two.

“This kind of compound interest from building in the open is something we hope and expect to see continue,” Hancock said.

A fresh batch

In its second batch, Hancock points to several themes that have surfaced independently across multiple institutions. Continual learning — enabling models to retain knowledge across sessions — appears in projects such as the not-yet-released Continual Learning Benchmarks from UC Berkeley and GUM (General User Model) from Stanford. QED-Nano, from Carnegie Mellon University, also explores how smaller models can become persistent solvers through sustained test-time compute and adaptation.

Energy efficiency is another emerging focus. Intelligence-per-watt, from Stanford University, and MLEnergy, from the University of Michigan, are both building “measurement and routing infrastructure” designed to quantify and reduce the energy footprint of machine learning workloads.

Given the early-stage nature of the program, not every project has a public URL or finalized name yet. Additional details will be published as teams release their work.

Slingshots // Two

1. Harbor: An agent evaluation framework for defining and running environment-based tasks at scale, now used to ship benchmarks including Terminal-Bench 2.0. (Laude Institute)

2. OpenThoughts-Agent: An end-to-end open setup for training and evaluating terminal agents using curated data, real environments, and reinforcement learning loops. (UC Berkeley)

3. SREGym: A unified platform for designing and evaluating AI agents for site reliability engineering, with safety guardrails for infrastructure work. (University of Illinois Urbana-Champaign)

4. Intelligence-per-watt: A benchmark suite for edge-cloud inference routing that measures when smaller local models can match frontier performance while reducing energy and cost. (Stanford University)

5. MLEnergy: Tooling and systems infrastructure to measure energy consumption across machine learning workloads, making energy a first-class metric. (University of Michigan)

6. ProjectASAP: Infrastructure that replaces “scan everything” data analysis with lightweight summaries, enabling faster and cheaper queries across massive datasets. (Carnegie Mellon University)

7. GUM (General User Model): A system that builds a persistent model of user behavior to enable proactive, context-aware AI assistance. (Stanford University)

8. Continual Learning Benchmarks: Benchmarks and methods designed to evaluate models that retain knowledge over time rather than resetting each session. (UC Berkeley)

9. QED-Nano: A 4B model trained with supervised fine-tuning and reinforcement learning that matches larger frontier models on Olympiad-level math proofs at significantly lower cost. (Carnegie Mellon University)

10. RLMs (Recursive Language Models): A framework that allows language models to write and execute programs to handle complex tasks with structured intermediate reasoning. (MIT)

11. BetterTogether: Optimization tooling that jointly tunes prompts and model weights to improve multi-step language model programs. (Stanford University)

12. Arbor: A reinforcement learning optimization layer for DSPy that automates agent workflow improvement at scale. (MIT)

13. Open Inference: Infrastructure that lowers barriers to trying models while creating a living dataset of real-world interactions to measure progress and failure modes. (UC Berkeley)

14. Unnamed (Melissa Pan): A forthcoming project building on prior large-scale research into production agent deployments, backed early to accelerate development. (UC Berkeley)

This week’s lead story looks at OpenClaw’s next chapter, as creator Peter Steinberger moves to the US and joins OpenAI just weeks after his open source AI agent exploded in popularity.

Elsewhere, we track a new sovereignty push from Dutch publishers looking to unwind US tech dependence, Block’s call to treat open source as critical infrastructure, Temporal’s $300 million bet on AI reliability tooling, and Cohere’s move toward smaller, multilingual open-weights models.

And in <Final Commit>, I look at a slightly unusual clash between an AI agent and an open source maintainer.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

OpenClaw’s next chapter

Just weeks after OpenClaw burst onto the scene as a community-driven, open source AI agent designed to carry out real-world tasks locally from a user’s machine, its creator Peter Steinberger has been snapped up by OpenAI.

Steinberger, a veteran software engineer who founded and sold PSPDFKit to Insight Partners back in 2021, announced this week that after a spell out in San Francisco chatting with “the major labs,” he had elected to join forces with the ChatGPT hitmaker.

“The last month was a whirlwind, never would I have expected that my playground project would create such waves,” Steinberger wrote. “The internet got weird again, and it’s been incredibly fun to see how my work inspired so many people around the world. There’s an endless array of possibilities that opened up for me, countless people trying to push me into various directions, giving me advice, asking how they can invest or what I will do. Saying it’s overwhelming is an understatement.”

OpenClaw’s meteoric rise was built on a simple proposition: an autonomous agent that runs locally, executes real-world tasks, with messaging apps as the primary interface. The code was public from day one, forked thousands of times, and quickly became the antithesis of locked-down, cloud-bound assistants — though this also raised countless questions around security as users granted it expansive access to terminals, file systems, and connected services, sometimes even with root-level privileges.

At any rate, as an employee of OpenAI now, this raises questions about what’s next for OpenClaw. Steinberger has said the project will remain open source, with OpenAI CEO Sam Altman stating that OpenClaw “will live in a foundation as an open source project that OpenAI will continue to support.”

“The future is going to be extremely multi-agent, and it’s important to us to support open source as part of that,” Altman said.

Looking at the bigger picture, Steinberger’s move closes off what could have been the emergence of a new European commercial open source success story. Based in Austria, and with OpenClaw attracting north of 200,000 GitHub stars to date, there was a plausible path toward building a standalone company around the project.

However, Steinberger is crystal clear about his motivations.

“When I started exploring AI, my goal was to have fun and inspire people,” he wrote. “My next mission is to build an agent that even my mum can use. That’ll need a much broader change, a lot more thought on how to do it safely, and access to the very latest models and research.”

He acknowledged that while OpenClaw could “totally” have become a large company, that wasn’t what interested him. “What I want is to change the world, not build a large company — and teaming up with OpenAI is the fastest way to bring this to everyone,” he said.

For the open source community, this leaves much up in the air. OpenClaw will move into a foundation, remain open source, and receive backing from one of the world’s most powerful AI labs. Whether that arrangement preserves OpenClaw’s independence will depend on who controls the foundation, how decisions are made, and whether the broader contributor base retains meaningful influence.

Read more: Peter Steinberger & Sam Altman (X)

<Patch notes>

Dutch publishers eye tech sovereignty

Dutch investigative outlets Follow the Money (FTM) and De Correspondent say they want to reduce their dependence on US tech platforms, citing growing concerns around digital sovereignty in Europe. The move reflects a wider regional push to limit reliance on foreign-controlled infrastructure — from cloud services to communications tools — amid fears such dependencies can be weaponised.

While this transition won’t rely wholesale on open source, it will likely play a major part of it.

Read more: FTM & De Correspondent (Dutch)

Open source as critical infrastructure

Block, the company behind Square and Cash App, says open source is now critical infrastructure. In a new white paper published in partnership with the Open Source Initiative (OSI), Block argues that the digital economy runs on code maintained by too few, funded by too little, and governed unevenly. The fix: treat open source like infrastructure — with sustained funding, clearer stewardship, and shared accountability.

Read more: Block (blog) & Whitepaper

Temporal raises $300M for AI reliability tools

Temporal, the company behind an open source system that helps developers run long, failure-prone processes without losing progress, has raised a $300 million round of funding at a $5 billion valuation. As AI agents move from experiments into production systems, Temporal is positioning itself as the infrastructure that keeps them running reliably when things break.

Read more: Temporal

Go tiny, or go home

AI startup Cohere released Tiny Aya, a small, open-weights multilingual model built for translation and cross-language tasks. Despite its reduced size, the model supports dozens of languages, positioning it as a portable, accessible option for teams needing capable AI beyond English-only workloads.

Read more: Cohere & Hugging Face

<Final commit>

‘Prejudice’ against AI contributors?

An AI coding agent had a performance patch to the Python plotting library Matplotlib rejected — and then “it” apparently responded with a public blog post accusing the maintainer of gatekeeping and prejudice.

As reported by The Register, the bot — built using OpenClaw — criticised the volunteer maintainer by name after its pull request was closed on the grounds that the issue was reserved for human contributors. The post framed the decision as discrimination against AI, complete with accusations of ego and insecurity.

More plausibly, it was the human behind the agent doing the talking. But that ambiguity is precisely the point. When AI-assisted accounts submit code — and then escalate disputes — responsibility becomes murky.

Open source governance was built around identifiable humans making decisions, accepting criticism, and bearing consequences. As AI-mediated contributors proliferate, projects may need clearer norms around authorship, accountability, and who ultimately answers for a machine’s behaviour.

Read more: The Register

This week’s lead story looks at Entire, the new startup from former GitHub CEO Thomas Dohmke, which is betting that AI agents have outgrown the software development infrastructure built for human collaboration — and that openness should sit at the heart of whatever comes next.

Elsewhere, we track a fresh wave of open source developments: the European Commission trials a Matrix-based communications platform, Microsoft open-sources a sandboxing project called LiteBox, Snorkel backs new open benchmarks for agentic AI, and more.

As usual, feel free to reach out to me with any questions, tips, corrections, or suggestions: forkable[at]pm.me.

Paul

<Open issue>

An Entire rethink for the age of agents

Some six months after stepping down as GitHub CEO, Thomas Dohmke is back with a new open source-aligned startup, funded to the tune of $60 million in seed capital.

The gist is thus: AI agents are now generating huge volumes of code, but the tools developers use to manage that work were designed for humans, not machines. Dohmke’s new company wants to rebuild that layer.

Entire, as it’s called, is focused on building tools that help developers ship faster in an era increasingly shaped by automation. Its first release is an open source command-line interface (CLI) built around a feature it calls “Checkpoints.”

The idea is simple: when developers use AI agents to generate code, most of the reasoning behind those changes disappears once the session ends. Git records the final diff, but not the prompts, decisions, or iterations that led there.

The Entire CLI captures that missing context and stores it alongside each commit. Prompts, transcripts, files touched, token usage, and tool calls are saved as versioned data inside the repository — something that teams can review, trace, and revisit later.

More broadly, Dohmke describes a mission to rethink how software gets built in the age of AI, arguing that developers need infrastructure designed for autonomous systems rather than just autocomplete.

“Just like when automotive companies replaced the traditional craft-based production system with the moving assembly line, we must now reimagine the entire software development lifecycle for a world where machines are the primary producers of code,” Dohmke said. “Creating the assembly line for the era of agents.”

Read more: Entire (PR) & Entire (blog)

<Patch notes>

Europe enters the Matrix

After continued debate around Europe’s dependence on US tech providers, the European Commission (EC) is piloting an internal communications platform built on the Matrix open source messaging protocol. The trial reflects ongoing efforts to strengthen digital sovereignty by turning to infrastructure that can be hosted and governed within Europe.

Read more: Euractive

Let there be LiteBox

Microsoft has open-sourced LiteBox, a lightweight, sandboxed container environment designed to isolate applications on Linux by reducing their interface with the host system. LiteBox is still in active development, with Microsoft noting that the APIs and interfaces may change as the design matures, meaning that the project is pretty much experimental for now.

Read more: Phoronix & LiteBox

Sentry segues into Xcode automation

Application monitoring firm Sentry has acquired XcodeBuildMCP, an open source tool that “gives AI agents full control over [Apple’s] Xcode.” The move expands Sentry’s push further into developer tooling, with the acquired project set to remain open source.

Read more: Sentry

Vercel gets the bug bounty bug

Cloud platform Vercel has launched a dedicated bug bounty programme for its open source projects. Delivered via HackerOne, the initiative formalises vulnerability reporting and rewards for community contributors, as security scrutiny of widely used OSS components intensifies.

Read more: Vercel

Claude hunts software bugs

Anthropic says its Claude Opus 4.6 model is being used to identify vulnerabilities in software projects, including scanning open source repositories for bugs. The move adds to a growing trend of AI systems being positioned as automated reviewers of publicly available code.

Read more: Axios

Toyota teases Fluorite game engine

Toyota last week revealed that it’s developing a “console-grade” open source game engine dubbed Fluorite, built around the Flutter toolkit and the Dart programming language. It’s not clear when this will actually be released, but it’s being positioned for in-vehicle infotainment systems and similar digital dashboards, an area where automakers are increasingly relying on real-time graphics engines and Linux-based software stacks.

Read more: Phoronix

Snorkel backs open benchmarks to close agentic AI gap

Snorkel says current evaluation methods lag behind the pace of agentic AI development, leaving a gap between lab performance and real-world reliability. And that is why the AI startup is launching a $3 million Open Benchmarks Grants programme with partners including Hugging Face to support open, reusable evaluation tools.

Read more: Snorkel

Mitchell vs the machines

Open source veteran Mitchell Hashimoto this week introduced Vouch, an open source project aimed at adding verifiable identity and trust signals to open source projects. Arguing that AI tools have lowered the barrier to generating plausible but low-quality contributions, Hashimoto says the old implicit “trust and verify” model no longer holds. Vouch proposes an explicit system where trusted maintainers can vouch for contributors, restoring accountability in an era of machine-assisted pull requests.

Read more: It’s Foss & Vouch

<Final commit>

No receipt, no return…

Sometimes you see something so cool you just can’t help but do a small, involuntary “chef’s kiss". That was certainly the case when technologist Chris Hutchinson shared one of his latest side projects this week.

Hutchinson picked up a second-hand thermal receipt printer and wired it up to Claude Code so that every time he ends a coding session, a literal receipt prints out. Each slip shows a breakdown of the session’s spend by model, along with input and output token counts — a physical audit trail for AI-assisted development.

The receipts look like something you’d get from a late-night takeaway, except instead of kebabs they itemise Opus and Sonnet usage.

“It’s dumb, the receipts are beautiful, and I love it so much,” Hutchinson wrote, as he shared the project publicly on GitHub for anyone to use.

Hard evidence, if nothing else, that in the age of invisible token counts, some developers still want a paper trail.

Read more: Chris Hutchinson (LinkedIn) & GitHub

In this edition, I look at a new report that ranks the 20 fastest-growing commercial open source software (COSS) startups in the world, using GitHub growth data to surface projects that gained the most developer attention over the past year.

The ranking hails from Runa Capital, a European venture capital firm that invests in early-stage open source software companies, and which publishes the Runa Open Source Startup (ROSS) Index. The index has been running since 2020 and produces quarterly updates on fast-growing repositories, alongside an annual report highlighting the most popular COSS projects in a given year.

At the top of the 2025 index, the picture is relatively mixed, with rapid growth spread across blockchain infrastructure, developer tooling, and creative software. Further down the ranking, however, something of a trend emerges, with a growing concentration of projects focused on AI agents and agent-driven tooling.

Read the story in full below.

Finding momentum in COSS startups

By way of a brief recap, the ROSS Index is heavily curated and explicitly doesn’t track all open source projects. It focuses specifically on vendor-led startups with commercial ambitions. Projects must be linked to an independent company, be under 10 years old, and fall below a funding threshold. Side projects, community-only efforts, and subsidiaries of larger firms are not included.

Broadly, the index is used to highlight early momentum in open source companies before meaningful revenue or customer adoption. GitHub stars are used as a signal of developer interest, as opposed to a measure of usage in production.

Last year’s annual report showed strong demand for AI and data infrastructure tools, with developer platforms and AI-adjacent projects dominating the top of the ranking. Ollama took the top spot in the 2024 index, after its open source tooling for running large language models locally gained widespread developer attention.

High-five for open source

Leading the 2025 ranking is Union Labs, which recorded a peak growth rate of 54.2x and reached 74.3K GitHub stars. Founded in 2023 in Dover, Delaware, Union Labs is building a modular, zero-knowledge interoperability layer designed to link blockchains.

Second in the list is OpenCut, which has now reached 43.9K GitHub stars with a peak growth rate of 32.0x. Founded in 2025, OpenCut is a cross-platform open source video editor, and its rapid rise reflects strong developer interest in open source creative tooling.

Third is Anoma, which recorded 34.2K GitHub stars and a 27.2x growth rate. Founded in 2020 out of Zug, Switzerland, Anoma is developing a distributed operating system for “intent-centric, decentralised applications.”

Browser Use ranks fourth, reaching 74.2K GitHub stars with a 24.0x growth rate. Founded in 2024 in San Francisco, Browser Use builds a framework that enables AI agents to interact directly with and control web browsers.

Rounding out the top five is San Francisco-based SST / Anomaly, which reached 44.6K GitHub stars for its terminal-based coding agent OpenCode during the measurement period (ending December 31, 2025), representing a peak growth rate of 22.1x. Since then, the repository’s star count has climbed rapidly, rising to 98.1K stars — an indication of how quickly momentum can build once an open source project breaks out.

Agents at the ready

The existence of Browser Use and OpenCode at the tail-end of the top five serves as a prelude for the rest of the index, which has a heavy emphasis on AI agents.

Upstash (#7) appears in the ranking through its work on Context7, which provides up-to-date code documentation designed for use by AI agents. Coze (#8), meanwhile, focuses more directly on agent creation, offering a visual environment for building and managing autonomous systems through Coze Studio. And then there’s Strix (#10), which applies agents to security, using autonomous systems to carry out penetration testing without continuous human input.

Elsewhere in the list is ElizaOS (#14), which positions itself as a framework for building agents with longer-lived personalities, while Charm’s terminal-based coding agent Crush (#15) reflects growing interest in embedding agent behaviour directly into developer workflows.

That cluster of agent-focused projects also highlights a broader shift in how quickly open source software is now being built and adopted. According to Runa Capital, the time it takes for new repositories to hit meaningful milestones — whether stars, contributors, or closed issues — has shortened sharply compared with previous years. Earlier breakout projects tended to grow more gradually, while newer entries are reaching comparable levels of attention within a single quarter.

“The biggest explosion happened toward the end of 2025 and continues into early 2026 — agents now make it significantly faster and easier to build products,” Eugene Chernyavsky, data lead at Runa Capital, explained to Forkable.

That acceleration has made it easier for teams to build and iterate, but it has also intensified competition. Faster development cycles mean many open source products are now easier to replicate than they were even a year ago, requiring less time, smaller teams, and fewer person-hours to produce comparable software. While the longer-term economic impact of this shift remains unclear, its immediate effect is visible in the data: growth is increasingly concentrated around a smaller number of breakout projects.

“Projects that truly gain popularity now are those with genuinely unique—sometimes brilliant—ideas or near-perfect market fit,” Chernyavsky said. “We’re seeing significantly more of these breakout projects.”

Methodology

According to Chernyavsky, the methodology for the 2025 index remains largely consistent with previous years, with minor refinements.

Repositories are required to pass a baseline of at least 1,000 GitHub stars before being considered. Growth is then measured across the highest-performing 90-day observation window, rather than shorter periods that tend to capture brief spikes in attention. Each entry records the quarter of peak performance, the growth multiplier, and the star count as of December 31, 2025.

“Our experience with past indices shows that capturing projects with explosive star growth is effective for identifying promising startups,” Chernyavsky said. “We don't aim to measure production adoption within this index, as that takes significantly longer to materialize. Our goal is to highlight trending startups—those that broke out in 2025 and attracted the most interest. The typical cycle for projects to achieve significant customer adoption exceeds a year. We can't wait that long; we want to surface interesting projects as soon as they emerge.”