Open Source with Fexingo: Linux, GitHub, and Community-Driven Software Conversations

Episode 141 explores the delicate balance open source projects must strike when accepting corporate sponsorship. Using the Vite project as a case study, Lucas and Luna discuss how the team handles sponsor feature requests without compromising community priorities, the role of transparent governance like Open Collective, and the best practices that maintain trust. They also touch on the broader sustainability of open source and listener support.

#OpenSource #Sponsorship #Vite #OpenCollective #SoftwareSustainability #CommunityTrust #OpenSourceFunding #Maintainer #Tech #Business #Technology #FexingoBusiness #BusinessPodcast #OpenSourcePodcast #LucasAndLuna #SponsorConflict #Transparency #OpenGovernance

Keep every episode free: buymeacoffee.com/fexingo

Lucas and Luna explore how major open-source projects—from the Linux kernel to Django—treat documentation as a first-class asset, with rigorous review, version control, and community contribution processes. They examine the documentation sprint tradition, the role of tools like Sphinx and ReadTheDocs, and why good docs often determine whether a project thrives or stagnates. A concrete look at the unsung heroes of open source.

#OpenSource #Documentation #LinuxKernel #Django #Sphinx #ReadTheDocs #CommunityDriven #TechDocumentation #FexingoBusiness #BusinessPodcast #Technology #GitHub #DeveloperExperience #DocumentationSprint #VersionControl #OpenSourceGovernance #SoftwareMaintenance #DocumentationAsCode

Keep every episode free: buymeacoffee.com/fexingo

Two years after the xz backdoor incident shocked the open source world, projects are fundamentally rethinking how they verify dependencies. This episode explores the attack's anatomy — how an exploited maintainer burnout allowed a backdoor into liblzma — and the lasting changes it triggered. We discuss GitHub's mandatory two-factor authentication for critical projects, the Open Source Security Foundation's Scorecard tool adoption, and the rise of software bill of materials (SBOM) mandates. We also look at how foundations like Apache are now requiring signed commits and reviewing maintainer succession plans. The episode highlights concrete numbers: Scorecard checks grew from 1 million to over 50 million monthly, and the OpenSSF secured $30 million in industry funding for security audits. We examine the tension between rapid development and supply chain safety, and what the next generation of dependency management tools might look like. A must-listen for developers and tech leaders navigating the post-xz landscape.

#OpenSource #SupplyChainSecurity #xzBackdoor #DependencyManagement #SBOM #OpenSourceSecurity #Linux #GitHub #Apache #OpenSSF #MaintainerBurnout #SoftwareSupplyChain #Security #TechnologyPodcast #FexingoBusiness #BusinessPodcast #TechPodcast #OpenSourcePodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 138 dives into how the GLib library and the broader GNOME project migrated from the decades-old Autotools build system to the modern Meson build system. We explore the technical challenges of maintaining dual build systems, the careful deprecation process, and the community coordination required to avoid breaking thousands of downstream packages. With insights from GNOME developers, we examine why such migrations are necessary and how other open source projects can learn from this painstaking transition. Specific examples include GLib's four-year co-maintenance period, the impact on distribution packagers, and the role of continuous integration in ensuring stability. This episode offers a practical look at open source infrastructure modernization.

#GLib #GNOME #MesonBuild #Autotools #BuildSystems #OpenSourceMigration #SoftwareModernization #BackwardCompatibility #CProgramming #LinuxDesktop #ContinuousIntegration #DeprecationStrategy #OpenSourceInfrastructure #DeveloperExperience #CommunityGovernance #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Burnout is the silent crisis in open source. In this episode, Lucas and Luna explore why so many maintainers are stepping away—and what projects are doing about it. They start with the infamous npm sabotage case as a wake-up call, then dive into recent data from the Linux Foundation's 2025 survey showing that over half of maintainers have considered quitting. They discuss the root causes: unpaid labour, 24/7 security pressure, and the expectation of free support. Then they highlight solutions that are actually working—from the Node.js Foundation's rotation program to automated tooling that reduces manual triage. They also tackle the uncomfortable question of corporate dependency: how companies that rely on free software can give back without co-opting the community. The episode concludes with a look at sustainable models like the Rust Foundation's full-time maintainer programme and how listener support keeps shows like this ad-free. Specific, data-driven, and honest.

#OpenSource #MaintainerBurnout #LinuxFoundation #NodeJS #RustFoundation #GitHub #CommunityDriven #DeveloperWellbeing #SoftwareSustainability #BurnoutCrisis #TechPodcast #Technology #BusinessPodcast #FexingoBusiness #LucasAndLuna #OpenSourceSustainability #MaintainerSupport #FreeSoftware

Keep every episode free: buymeacoffee.com/fexingo

When a library used by millions of developers announces its own sunset, it's not a failure — it's a deliberate act of stewardship. This episode uses the story of moment.js to explore how open source projects plan a graceful deprecation: migration guides, fallback timelines, and the hard human decision to let go. We talk about the burnout that drives such choices, the role of financial sustainability, and why a controlled shutdown often serves the community better than slow abandonment.

#OpenSource #Deprecation #MomentJS #MaintainerBurnout #JavaScript #SoftwareSustainability #CommunityManagement #FexingoBusiness #BusinessPodcast #Tech #OpenSourceMaintenance #SoftwareLifecycle #MigrationGuide #LibrarySunset #Burnout #DeveloperExperience #OpenSourceFunding #LunaAndLucas

Keep every episode free: buymeacoffee.com/fexingo

Blender, the open-source 3D creation suite, has built a sustainable funding model without venture capital or a corporate owner. Lucas and Luna break down how the Blender Foundation’s development fund works, the numbers behind its annual budget, and why it refuses the typical acquisition path. They also explore the broader lessons for open-source sustainability — and how listener support keeps independent projects like this going.

#OpenSource #Blender #BlenderFoundation #DevelopmentFund #FundingModel #Sustainability #NonProfit #CommunityDriven #CorporateSponsorship #VC #OSSustainability #Donations #Grants #Technology #TechPodcast #LucasAndLuna #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 134 of Open Source with Fexingo examines how open source projects are tackling the migration to post-quantum cryptography. Following NIST's 2024 selection of the first quantum-resistant algorithms, projects like OpenSSL, liboqs, and the Open Quantum Safe project are implementing new cryptographic primitives to protect against future quantum attacks. Lucas and Luna discuss the technical challenges of crypto agility, the risk of 'harvest now, decrypt later', and the role of community testing in hardening these new standards. They also explore the tension between urgent security updates and careful fragmentation, and how open source maintainers are coordinating with hardware vendors and enterprise users. A timely conversation for anyone interested in the infrastructure behind secure communications.

#PostQuantumCryptography #OpenSource #NIST #QuantumResistant #CryptoAgility #OpenSSL #OpenQuantumSafe #liboqs #Cybersecurity #Cryptography #Technology #SoftwareSecurity #QuantumComputing #FexingoBusiness #BusinessPodcast #OpenSourceWithFexingo #LucasAndLuna #InfrastructureSecurity

Keep every episode free: buymeacoffee.com/fexingo

When disaster strikes, up-to-date maps are critical for first responders. But many affected regions lack detailed digital maps. Open source projects like the Humanitarian OpenStreetMap Team (HOT) and Ushahidi fill this gap by coordinating thousands of volunteers worldwide. In this episode, Lucas and Luna explore how open source crisis mapping works, from the 2010 Haiti earthquake to the 2015 Nepal earthquake, where mappers added over 200,000 buildings in 48 hours. They discuss the technology behind the Tasking Manager, how volunteers validate data in real time, and the challenges of maintaining accuracy under pressure. Learn how community-driven software is transforming disaster response and why a culture of contribution makes all the difference.

#OpenSource #HumanitarianOpenStreetMap #HOT #Ushahidi #CrisisMapping #EmergencyResponse #DisasterRelief #OpenStreetMap #VolunteerMapping #TechForGood #OpenData #Fexingo #OpenSourceWithFexingo #TechnologyPodcast #CommunityDriven #Mapping #SocialImpact #DisasterTech

Keep every episode free: buymeacoffee.com/fexingo

When a critical vulnerability is discovered in open source software, the path from discovery to patch is a delicate dance of secrecy, coordination, and trust. This episode uses the 2024 xz backdoor and the Heartbleed bug as case studies to explore how maintainers, security researchers, and downstream distributors handle embargoes, disclosure timelines, and the tension between transparency and safety. Lucas and Luna examine the role of foundations like the Open Source Security Foundation (OpenSSF), the CVE system, and the often-overlooked burden on volunteer maintainers. They also discuss what listeners can do to stay secure and support the infrastructure projects that power the internet.

#SecurityVulnerabilityDisclosure #OpenSourceSecurity #xzBackdoor #Heartbleed #OpenSSF #CVE #CoordinatedDisclosure #MaintainerBurnout #SupplyChainSecurity #Linux #LucasAndLuna #FexingoBusiness #BusinessPodcast #Technology #OpenSourceGovernance #SecurityResearcher #EmbargoPolicy #DownstreamCoordination

Keep every episode free: buymeacoffee.com/fexingo