Servo 0.4.0 landed a record 558 commits and fixed layout on real sites. Its own dashboard reads 65.9%, CSS Grid sits at 37.8%, and text selection isn't shipped yet.
Vercel Labs open-sourced scriptc, a TypeScript-to-native compiler with no JS engine in the binary. Its README claims 2.4ms startup. Hacker News is not convinced.
Threat-intel firm Hunt.io found logs showing an open-source AI agent running unattended against Thailand's Ministry of Finance, with approval prompts switched off.
Codeberg's terms now bar projects that mostly consist of AI-written code. Debian's open resolution puts three answers on one ballot. Provenance is the crux.
Jack Dorsey's Block launched Buzz, an open-source workspace that fuses team chat, AI agents, and Git hosting on Nostr, aiming squarely at Slack and GitHub.
Flipper Devices says the Flipper Zero isn't abandoned, but a 700 KB flash limit is pushing firmware work onto the community while its team builds new hardware.
LibrePods reverse-engineers Apple's private AirPods protocol to bring ear detection, battery status, and noise control to Android and Linux.
HackerRank put its AI hiring agent on GitHub under MIT. One developer ran a single resume through it 100 times and watched the score swing from 66 to 99.
Deno 2.9 ships a 1.98x faster cold start, a native desktop-app builder, and direct reading of npm, pnpm, yarn, and Bun lockfiles. Here's where Deno sits now.
June 2026's standout Hacker News projects: Half-Life 2 streamed into a browser tab, a searchable 18-year HN archive, a Pareto-frontier mini-PC tracker, and more.
Intel archived its Open Ecosystem Community and Evangelism hub and dozens of open-source projects as cost cuts reshape what one of Linux's biggest backers funds.
Epic Games open-sourced Lore, a binary-first version control system meant to scale to Fortnite-sized monorepos that break Git and cost a fortune on Perforce.
Tesco is moving 40,000 workloads off VMware and suing Broadcom for £100M, the loudest signal yet in the post-acquisition exodus toward KVM, Proxmox, and OpenStack.
DepthFirst's agent surfaced 21 FFmpeg zero-days for about $1,000. One 183-byte packet hits RCE. The deeper story is who pays the volunteers who fix them.
A worm hijacked Red Hat's npm namespace, a rootkit spread through 1,500 Arch AUR packages, and a SOC 2-certified AI gateway shipped malware. Registries are under fire.
Cloudflare acquired VoidZero, Evan You's company behind Vite, Vitest, Rolldown and Oxc. The tools stay MIT-licensed, and there's a $1M ecosystem fund.
Godot, Unity and Unreal get the headlines, but six open-source tools quietly do the art, levels, and dialogue work that real games ship on.
Microsoft's Coreutils for Windows brings native ls, cp, and grep to Windows, built on the Rust uutils project. Here's what it is and why the Rust rewrite matters.