Google is tackling one of the most problematic security issues in open source: memory-safety vulnerabilities. According to a recent report from Microsoft’s Security Response Center, a majority of vulnerabilities are due to memory-safety issues, and Google believes almost half of these issues could be prevented with a memory-safety language. “Software written in unsafe languages often … continue reading
The Apache Software Foundation (ASF) announced that Apache Gobblin, the open-source distributed Big Data integration framework, has reached top-level project status. According to the foundation, achieving top-level status means that the project graduated from the Apache Incubator and has demonstrated that it’s community and products have been well-governed under the ASF’s meritocratic process and principles. … continue reading
Matillion announced that it raised $100 million in Series D funding that it will help organizations innovate with data to unlock insights. Matillion offers a cloud-native platform that helps organizations transform raw data into analytics-ready data by providing low-code/no-code solutions. “Matillion accelerates the value of today’s cloud data platforms, ensuring that data teams can work … continue reading
This week’s featured open-source project is Apache Arrow Flight, a RPC framework for high-performance data services based on Arrow data. The project was co-developed by daka lake engine company Dremio, which recently added new support, and is built on top of gRPC and the IPC format. According to the team, Flight works by defining a … continue reading
Google wants to help make building lightweight compiler plugins in Kotlin easier as well as address some of the challenges developers face with the programming language. For instance, developers have struggled with the language’s lack of a native annotation processing system. To address these issues, the company has announced the alpha version of Kotlin Symbol … continue reading
Google launched Open Source Vulnerabilities (OSV) this week to provide users with precise data on where a vulnerability was introduced, where it got fixed, and to help users know if they’ve been impacted. According to Google, OSV solves issues surrounding open-source security using automation in two key ways: improving the accuracy of vulnerability queries and … continue reading
BluBracket announced the release of its free code security tool Community Edition, which uses an ML-based method that assigns secrets and repo risks scores. Users can connect to the tool through GitHub, scan up to 10 repositories and share reports in real time for more than 50 secret types in any language, according to the … continue reading
When it comes to what skills developers should be learning, a recent report found organizations and technology managers value open source. According to the report, which was conducted by O’Reilly Media and commissioned by IBM, the increasing adoption of hybrid cloud is driving the importance of open source skills. IBM predicts hybrid cloud adoption will … continue reading
The fifth JetBrains annual report showed that there are 10.1 million JetBrains users around the world and that the company’s revenue grew by 11% in 2020 (with the greatest increase in China at 85%). JetBrains has created an extended family of integrated development environments (IDE) for various programming languages and designed Kotlin, the officially preferred … continue reading
Visual Studio Code 1.53 includes JavaScript debugging with support for conditional exception breakpoints and Node.js worker_threads, as well as Notebook UX updates, a markdown preview image auto update, and more. Users can now start multiple concurrent debug sessions and each subsequent debug session will have a number at the end of the name so it … continue reading
The Workload Analyzer for Presto was open sourced this week by Varada, a data lake query acceleration innovator that aims to help data engineers gain holistic visibility into the performance of Presto clusters. Varada originally built the tool because it leverages the distributed SQL query engine Presto in its query acceleration engine Varada Data Platform. … continue reading
MongoDB has announced a new fully managed service that syncs data between the modern Realm mobile database and MongoDB Atlas, which allows organizations to quickly build responsive applications for their customers and remote workforces. “For developers who aspire to build these best-in-class experiences on mobile, Realm Sync can be transformative in reducing the amount of … continue reading