Best of Open Source — March 2026

1. 1
   Video

   bigboxSWE·5w

   The programming habit I wish I started sooner

   Reading open-source code is one of the most underrated ways to grow as a developer. Rather than rushing to contribute, spending time exploring codebases of tools you already use teaches scaling patterns, performance techniques, and real-world best practices that courses and books rarely cover. Practical advice includes cloning repos of projects you care about, exploring specific features that interest you, and even compiling projects from source to understand build systems. Recommended projects to explore include the Linux kernel, FFmpeg, GitLab, React, and open-source AI models like DeepSeek. The post also promotes PostHog as a developer analytics platform.

   205

   11
2. 2
   Article

   Collections·5w

   Office.eu launches in The Hague as a European alternative to Microsoft 365

   Office.eu has launched in The Hague as a European-owned cloud productivity suite built on Nextcloud Hub and Collabora Online (LibreOffice-based). It targets users seeking an alternative to Microsoft 365 and Google Workspace, with all data hosted on Hetzner servers in Europe and outside US Cloud Act jurisdiction. The platform includes migration tools and is rolling out by invitation, with a broader European launch planned for Q2 2026. It arrives amid growing EU digital sovereignty momentum, with 27 member states signing a sovereignty declaration and sovereign cloud spending forecast to triple to $23 billion by 2027. Nearly 15,000 early access applicants signed up before launch.

   193

   30
3. 3
   Article

   Facebook Engineering·6w

   FFmpeg at Meta: Media Processing at Scale

   Meta runs FFmpeg and ffprobe tens of billions of times daily to handle over 1 billion video uploads. For years, Meta maintained an internal FFmpeg fork to support threaded multi-lane encoding and real-time quality metrics. By collaborating with FFmpeg developers, FFlabs, and VideoLAN, Meta contributed these capabilities upstream—threaded multi-lane encoding landed in FFmpeg 6.0/8.0 and in-loop decoding for real-time quality metrics in 7.0—allowing Meta to fully deprecate its internal fork for VOD and livestreaming pipelines. Meta also integrated its custom MSVP video transcoding ASIC via FFmpeg's standard hardware APIs, though that integration remains internal since the hardware isn't publicly accessible. Meta plans to continue investing in upstream FFmpeg development.

   147
4. 4
   Article

   Yegor's Blog·6w

   Fast Software: More Programmers, Not Fewer

   AI coding agents will transform software development similarly to how fast fashion disrupted tailoring. Rather than eliminating programmers, this shift will devalue software craftsmanship and make software disposable and cheap to produce. Large software companies like Oracle, Adobe, and Microsoft will lose their monopoly on complexity as small shops can rebuild entire platforms for a few thousand dollars. The result will be a surge in demand for 'AI operators' — people who direct AI agents to build custom software — creating more jobs than exist today, not fewer.

   108

   15
5. 5
   Article

   John Reilly·7w

   npmx.dev: with a little help from my friends

   A personal account of contributing to npmx.dev, a community-built reimagining of the npmjs.com website. The author discovered a UX bug where npm API rate limiting (HTTP 429) caused the site to incorrectly show packages as missing. Using Claude Code to help write Vue/Nuxt code despite limited framework experience, they submitted a PR that displayed a proper rate-limit message to users. The post highlights npmx.dev's welcoming contributor culture, its thoughtful AI usage guidelines in CONTRIBUTING.md, and encourages others to get involved.

   76
6. 6
   Article

   David Heinemeier Hansson·4w

   ONCE (Again)

   DHH reflects on the pivot of the ONCE product line from paid self-hostable web apps to open source with permissive licenses. The original model—selling apps like Campfire for a one-time fee—only broke even. Releasing Campfire, Writebook, and the new Fizzy as free open-source projects proved far more successful, driving adoption and community contributions. The ONCE platform now offers a terminal interface for tracking app metrics (RAM, CPU, visitor counts), zero-downtime upgrades, and scheduled backups, positioning itself as infrastructure for self-hosted apps including those built by AI agents.

   71

   1
7. 7
   Article

   It's Foss·3w

   Someone Forked Systemd to Strip Out Its Age Verification Support

   A developer named Jeffrey Seathrún Sardina has forked systemd into 'Liberated systemd', removing the recently added birthDate field tied to age verification laws in California, Colorado, and Brazil. The fork strips out all related code including homectl options, man page entries, and tests. While the birthDate field in mainline systemd is optional, admin-only, and not acted upon by systemd itself, the developer views it as surveillance-enabling code. The fork is currently a one-person project with no releases and is already 37 commits behind upstream, making it unsuitable for production use. The author suggests such forks serve more as protest and conversation starters than serious long-term alternatives.

   73

   18
8. 8
   Article

   freeCodeCamp·6w

   OSS Pull Request Therapy: Learning to Enjoy Code Reviews with npmx

   A developer shares her personal journey from OSS skeptic to contributor on the npmx project, detailing her struggles with code review anxiety and perfectionism. Through her first real PR experience on npmx, she learned to embrace collaboration over perfection and developed a more nuanced view of open source. The post includes practical tips for evaluating OSS projects before contributing and advice for both PR authors and reviewers on building a healthier review culture.

   59

   1
9. 9
   Video

   Theo - t3․gg·5w

   AI is ruining open source

   AI is creating serious problems for open source maintainers through PR spam, lower-quality contributions, and increasingly toxic users who lack foundational understanding. Projects like TL Draw are closing external PRs entirely, Node.js has raised bug reporting requirements due to AI spam, and maintainers are burning out faster than ever. The funding model for open source is also deteriorating as AI tools reduce the need to purchase templates, courses, or UI kits. Community tools like Vouch (a trust-based PR filtering system) and PR Stats offer partial solutions, but GitHub itself is criticized for failing to provide adequate moderation tools. The Open Source Pledge—where companies commit $2,000/dev/year to open source—is highlighted as a meaningful funding initiative. Developers are urged to be kind to maintainers, contribute thoughtfully, help triage issues, and financially support the projects they rely on.

   52

   6
10. 10
    Article

    selfh.st·5w

    Self-Host Weekly (13 March 2026)

    Weekly self-hosting newsletter covering community drama around Booklore and ntfy's AI-assisted v2.18 release, TrueNAS closing its build system source, and the trend of 'claw'-named projects. Also spotlights Open DroneLog, a self-hosted drone flight log platform deployable via Docker, plus curated videos, a CLI tip for mkdir -p, and miscellaneous homelab news.

    46

    1
11. 11
    Article

    freeCodeCamp·6w

    There are 2 kinds of devs. One of them is screwed. Justin Searls interview [Podcast #210]

    Justin Searls, a software engineer who cofounded an agency 15 years ago and retired at 38, discusses how AI agents are reshaping software development. Key themes include the shift from team-based to individual developer work, the importance of verifiability in AI-assisted codebases, and how newer developers can leverage emerging tools to compete with experienced engineers. The podcast also links to community resources including Kubernetes, Notion, Python, and AI agent courses.

    43

    1
12. 12
    Article

    Hackaday·6w

    California’s Problematic Attempt To Add Age-Verification To Software

    California's Digital Age Assurance Act (AB 1043), signed into law and taking effect January 1, 2027, requires OS providers to implement an age-verification API. The law mandates that users declare their age bracket at account setup, which apps and app stores must then use to gate access. Critics point out major flaws: the self-reported age system is no more reliable than old-school age-dropdown widgets, enforcement is vague, edge cases like shared family accounts are unaddressed, and FOSS developers face disproportionate legal risk. The governor himself expressed hope the bill would be amended. Requiring photo ID would give it real teeth but would conflict with the bill's own privacy-preserving provisions.

    40

    27
13. 13
    Article

    daniel.haxx.se·3w

    Don’t trust, verify

    Daniel Stenberg, curl's creator, outlines the comprehensive security and verification practices the curl project employs to protect one of the world's most widely used software components. He enumerates realistic attack vectors — from insider threats and credential breaches to CI pipeline compromises and supply chain attacks — and explains how curl counters them through 21 specific practices: strict code style enforcement, banning binary blobs and Unicode obfuscation, mandatory 2FA, 200+ CI jobs, fuzzing via OSS-Fuzz, valgrind/sanitizer runs, torture tests, external audits, and a public verification page. He urges users to independently verify curl releases and to demand similar transparency from all software dependencies.

    66

    3
14. 14
    Article

    Collections·4w

    Age verification laws are putting Linux distros and Valve in a tough spot

    Several US states are passing age verification laws that require operating systems and app stores to verify user ages, creating compliance challenges for Linux distributions and platforms like Valve's Steam. Linux distros lack the centralized account systems these laws assume, leading to varied responses: Ubuntu and Fedora are exploring privacy-conscious local solutions, System76 is lobbying for open-source exemptions in Colorado, while some distros like MidnightBSD have taken extreme steps like license changes. Valve is fighting a New York AG demand for expanded age verification and data collection, arguing payment processors already handle this and additional data collection creates privacy risks. The core tension is that these child safety laws are designed for large commercial platforms and impose centralized data collection mandates that fit poorly with open-source software architecture and privacy-focused platforms.

    43

    9
15. 15
    Video

    Mental Outlaw·6w

    Online Age Checks Are Going Too Far

    California's AB 1043 and Colorado's SB26-051 would require operating system providers to implement age-bracket detection during setup, exposing user age data via a real-time API to installed apps. The laws apply retroactively to existing OS installations and carry fines up to $7,500 per affected child. While major OS vendors like Microsoft, Apple, and Google could absorb compliance costs, the Linux ecosystem faces unique challenges — especially hobbyist distros like Arch and Gentoo. Ubuntu has already raised questions about ambiguous scope (servers, VMs, adult users). The author argues this is a slippery slope toward full ID verification at the OS level, threatening online anonymity and the privacy advantages that drew users to Linux in the first place.

    39

    11
16. 16
    Video

    The Linux Cast·4w

    This Isn't Fun Anymore

    A long-time Linux user and content creator reflects on growing toxicity within the Linux community, coming from both veteran users and newcomers alike. The catalyst was a blog post by a new Linux user who publicly complained about someone kindly offering help on Mastodon, then wrote thousands of words criticizing the community for it. The core message is a call for mutual kindness: new users shouldn't take out frustrations on the community when Linux doesn't meet expectations, and veterans shouldn't be gatekeeping or condescending. The author admits the irony of ranting about someone else's rant, but expresses genuine concern that the two-way hostility is making community participation feel exhausting and not worth the effort.

    37

    4
17. 17
    Article

    omg! ubuntu!·6w

    Memerist is a new desktop meme generator for Linux

    Memerist is a new free, open-source native Linux desktop app (GTK4/libadwaita) for creating image memes. It offers built-in and custom meme templates, text layers with font/size/color controls, basic image editing features like cropping, blend modes, opacity, and global filters, and exports to PNG. Available on Flathub, it fills a gap for a dedicated, offline meme generator on Linux, avoiding the accounts, watermarks, and AI drift of online alternatives.

    29

    1
18. 18
    Article

    Avalonia UI Blog·5w

    The Avalonia WebView Is Going Open-Source

    Avalonia is open-sourcing its WebView control as part of the upcoming Avalonia 12 release. Previously a commercial-only feature in the Accelerate tier, the WebView uses native platform web rendering instead of bundling Chromium. The decision reflects that embedding web content has become a standard requirement, making a commercial license feel inappropriate. Existing Accelerate subscribers retain full support, and the commercial offering continues with other advanced tooling and components. The open-source WebView will ship in an Avalonia 12 pre-release and be included in the stable release.

    25
19. 19
    Article

    Phoronix·3w

    GNOME Foundation Announces Fellowship Program

    The GNOME Foundation has announced the creation of the GNOME Fellowship program, which will begin funding community contributors starting in May. Fellowships last 12 months and pay $70,000–$100,000 per year depending on experience and location, with options for full-time or half-time work. The program focuses on long-term sustainability of GNOME in areas such as build systems, CI/CD infrastructure, developer tooling, documentation, accessibility, and technical debt. Unlike traditional contracts, fellowships are trust-based with flexible scopes, allowing contributors to identify and solve problems as they arise. Applicants must already be experienced GNOME contributors with a proven track record.

    31

    1
20. 20
    Article

    Brave·6w

    Why Brave is opposing Google’s Android developer registry

    Brave has joined the EFF, Tor Project, and 40+ organizations opposing Google's plan to require all Android developers to register with government-issued ID starting September 2026, even those distributing apps outside the Play Store. The policy would create a centralized identity database of every Android developer, posing serious privacy risks especially for those building privacy tools, VPNs, and software for journalists and activists. Brave frames this as part of a broader pattern of Google leveraging platform control to insert itself into activities where users and developers didn't invite its involvement, alongside past moves like Manifest V2 deprecation, AMP, and Privacy Sandbox.

    21

    1
21. 21
    Article

    daniel.haxx.se·5w

    Dependency tracking is hard

    curl and libcurl, written in C, exist outside standard package ecosystems like npm, Go, or Rust. This makes them invisible to SBOM generators, dependency scanners, and tools that rely on package managers to map software dependencies. PURLs (Package URLs) also can't represent curl since it belongs to no ecosystem. Because curl is often bundled with operating systems or distributed as source tarballs, automated tools typically stop tracking dependencies at the layer above curl, missing it entirely. GitHub's dependency graph illustrates this starkly: despite curl being installed in roughly 30 billion places, GitHub lists only one dependent repository — and that one appears to be a mistake.

    21

    1
22. 22
    Article

    The Register·6w

    npmx alternative to npmjs released to fix pain of rpm

    A new open source npm registry browser called npmx has launched in alpha, created by Nuxt lead Daniel Roe at Vercel. It aims to address longstanding UX frustrations with the official npmjs.com interface, including missing dark mode, poor dependency display, lack of TypeScript/ESM info, and broken browser navigation. Built with Nuxt and integrating Bluesky's AT Protocol for social features, the project attracted 1,000 contributions within two weeks. It is sponsored by Netlify and Bluesky, which awarded a $6,000 grant. Notably, npmx only improves the browsing experience and does not change the underlying npm registry or publishing process.

    17

    2
23. 23
    Article

    It's Foss·3w

    Inside the Systemd Age Verification Debate: Developer Responds to Criticism

    Dylan M. Taylor, the developer who added an optional birthDate field to systemd's user database to help Linux distributions optionally comply with US age verification laws, shares his side of the controversy in an interview. He clarifies the change is not actual age verification — no ID checks or third-party validation are involved — and defends it as a lightweight, self-attested honor system similar to date pickers from the early 2000s. He also reveals the severe personal toll: death threats, doxxing, harassment, and having his personal information posted publicly. Dylan reflects on the broader tension between FOSS principles and legal compliance, predicting a future split between corporate-backed and independent Linux distributions on such issues, while affirming his commitment to open source despite the backlash.

    24

    12
24. 24
    Article

    Lobsters·4w

    Unix philosophy is dead! Long live... something else?

    A personal essay questioning the validity and practical applicability of the Unix philosophy in modern computing. The author argues that the Unix philosophy is a loosely defined myth with multiple conflicting interpretations, that real-world tools like cat and curl already violate its tenets, and that it was never designed for GUI-based or non-technical users. The piece broadens into a critique of how open-source software has become corporatized and lost its rebellious hacker spirit, how UI design has trended toward oversimplification that harms power users, and how developers wrongly seek universal solutions to inherently diverse problems. The author concludes with a personal set of pragmatic virtues encouraging nuanced thinking, variety, and challenging the status quo rather than blindly following any single philosophy.

    17

    3
25. 25
    Article

    selfh.st·4w

    Self-Host Weekly (20 March 2026)

    A weekly self-hosting newsletter covering the growing problem of AI-generated pull requests overwhelming open source project maintainers, Unraid v7.3.0 entering beta with support for non-flash-drive installation, a satirical site called Malus mocking AI-driven open source relicensing, and a spotlight on Sure — a self-hosted personal finance platform forked from Maybe that supports account linking, budgeting, investment tracking, and LLM-powered AI chat, deployable via Docker with PostgreSQL and Redis.

    15