OpenSSF created the Open Source Consumption Manifesto (OSCM) with the main objective of enhancing the utilization of open-source software. Similar to the Agile Manifesto, OSCM is based on core values and comprises 15 guiding principles for using open source. It is designed to be a continuously evolving document, according to the Open SSF. Open Source … continue reading
This week’s project, Codecov, originally claimed to be an open-source project, but in a subsequent post the day after the people behind the project apologized for referring to BUSL-1.1 as Open Source and explained the thought process behind the decision in detail. The definition of open source is outlined by the Open Source Initiative (OSI) … continue reading
The Rust Foundation outlined many improvements to the security structure of the language and expressed its commitment to developing tools, features, and recommendations based on security research in its Security Initiative Report. The Rust advancements follow the White House’s National Cybersecurity Strategy Implementation Plan that signals a deep civic investment in more secure programming languages like … continue reading
Stable Diffusion is a latent text-to-image diffusion model trained on 512×512 images from a subset of the LAION-5B database. The model utilizes a frozen CLIP ViT-L/14 text encoder to condition its output on text prompts. It incorporates an 860M UNet and a 123M text encoder, making it a relatively lightweight model that can run on … continue reading
The software intelligence company CAST has announced updates in its CAST Highlight summer 2023 release to help companies keep better track of the open-source software (OSS) components they are using in their applications. “In the world of software development, integrating OSS components into your business-critical application is akin to entrusting the health and stability of … continue reading
Deci, a deep learning company that uses artificial intelligence to develop AI, recently announced the launch of DataGradients. This open-source tool is designed to profile computer vision datasets and find essential insights. In computer vision, the effectiveness of an AI model is deeply connected to the quality of the training data. Therefore, identifying any issues … continue reading
GitHub Enterprise Server (GHES) 3.9 is now available with more features that can help organizations collaborate better, gain better observability, and have faster workflows. Among its highlights are a new time-based view in GitHub Projects, as well as the ability to standardize issues with tools such as issue forms. GitHub Projects has been enhanced with … continue reading
BROOKLYN, N.Y., June 28, 2023 /PRNewswire/ — Directus, an open-source software company focused on helping organizations build composable experiences, today introduced a new functionality within its open data platform that enables front-end developers to build real-time capabilities into their applications via WebSockets. Innovative organizations of all sizes turn to Directus to power and scale their data-driven applications. Many … continue reading
Snapchange is a Rust framework that can be used to fuzz a target binary with minimal modifications, offering useful insight into the process. It works by replaying physical memory snapshots in order to make the fuzzing of various targets more efficient and less complex. As it is agnostic to the target operating system, the snapshot … continue reading
AWS open-sourced a language called Cedar that enables users to easily create and enforce access control policies. It provides a unified framework for policy creation and management across multiple clouds, simplifies policy writing, and supports popular authorization models such as role-based and attribute-based access control. Additionally, AWS has adopted a verification-guided development process to ensure … continue reading
GitHub released its new code search and code view to enable developers to quickly search, navigate and understand their code, and put critical information into context. The new code search engine has been remodeled to be two times faster than the old one and has more capabilities such as supporting substring queries, regular expressions, and … continue reading
Frappe is a low-code full stack, batteries-included, web framework written in Python and JavaScript, using MariaDB as its database. It is designed to reduce the amount of time developers spend writing code. Frappe makes defining DocTypes easier without the need for code to be used everywhere, since everything in Frappe is a DocType. The framework … continue reading
