Open Source with Fexingo: Linux, GitHub, and Community-Driven Software Conversations

PostgreSQL is famous for never breaking upgrades — but how? This episode unpacks the actual engineering and governance practices that let the Postgres project maintain near-perfect backward compatibility across two decades. Lucas and Luna walk through the major version upgrade process, the 'don't break userspace' philosophy, and what happens when the committers have to choose between a cleaner codebase and a working upgrade path. Specific examples: how the project handled the transition from 9.6 to 10 (the first major version bump in a decade), and the controversial removal of 'WITH OIDS' support. If you've ever wondered how a community-driven database can be more reliable than enterprise products, this is the episode.

#PostgreSQL #BackwardCompatibility #Database #OpenSource #SoftwareEngineering #MajorVersionUpgrade #CommunityGovernance #Postgres #DatabaseUpgrades #Tech #Technology #Podcast #BusinessPodcast #FexingoBusiness #OpenSourcePodcast #SoftwareMaintenance #CodeQuality #LTS

Keep every episode free: buymeacoffee.com/fexingo

In this 100th episode of Open Source with Fexingo, Lucas and Luna dive into one of the most under-discussed challenges in open source: long-term maintenance debt. Using the real-world case of the OpenSSL library—which underpins encryption across the internet—they explore how critical projects accumulate years of technical debt, security patches, and orphaned code. Lucas breaks down the Heartbleed aftermath, the creation of the OpenSSL Foundation, and the ongoing struggle to fund and modernize foundational software. Luna brings in the example of Gentoo Linux's recent migration to Git, showing how even well-managed projects face historical baggage. Together they ask: what does it take to keep aging code alive when no one wants to pay for it?

#OpenSource #MaintenanceDebt #OpenSSL #Heartbleed #GentooLinux #GitMigration #TechnicalDebt #SecurityPatches #FundingOpenSource #LinuxFoundation #Cryptography #CommunityGovernance #LegacyCode #SoftwareSustainability #OpenSourceFoundation #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 99 of Open Source with Fexingo tackles one of the most complex infrastructure challenges facing open source: migrating cryptographic algorithms before quantum computers break them. Lucas and Luna dive into the Open Quantum Safe project, focusing on the liboqs library and the ongoing effort to integrate post-quantum cryptography into OpenSSL, the foundation of internet encryption. They walk through the specific NIST-selected algorithms — CRYSTALS-Kyber for key exchange and CRYSTALS-Dilithium for signatures — and discuss why a simple library swap won't work. The episode explores the tension between adding code complexity today vs. the risk of a brittle, rushed migration later. Real maintainer quotes from the OpenSSL mailing list ground the conversation. No buzzwords, just the concrete work of rewriting the most security-critical code in the world.

#PostQuantumCryptography #OpenQuantumSafe #liboqs #OpenSSL #NIST #CRYSTALSKyber #CRYSTALSDilithium #QuantumComputing #Migration #CryptoAgility #OpenSource #Security #Maintainers #FexingoBusiness #BusinessPodcast #Technology #Cybersecurity #Infrastructure

Keep every episode free: buymeacoffee.com/fexingo

Lucas and Luna unpack how open source projects manage intellectual property (IP) without a legal team on retainer. They focus on the concrete case of the Contributor License Agreement (CLA) used by the Apache Software Foundation and compare it with the Developer Certificate of Origin (DCO) popularized by the Linux Kernel. The episode walks through why CLAs can create friction for new contributors, how the DCO lowers the barrier to entry, and what happens when a project discovers someone contributed code they didn't own. They cite the real example of a React Native contributor dispute in 2022 that led to a code revert. The conversation concludes with practical advice for maintainers on picking the right IP framework for their community size and risk profile. No legalese—just the trade-offs in plain English.

#OpenSource #IntellectualProperty #CLA #DCO #ApacheSoftwareFoundation #LinuxKernel #ContributorLicenseAgreement #DeveloperCertificateOfOrigin #ReactNative #CommunityGovernance #LegalFrameworks #IPManagement #OpenSourceGovernance #ContributorExperience #FexingoBusiness #BusinessPodcast #Technology #OpenSourceWithFexingo

Keep every episode free: buymeacoffee.com/fexingo

In the open source ecosystem, semantic versioning—or SemVer—is supposed to make dependency management predictable. But what happens when maintainers disagree on what constitutes a 'breaking change'? This episode dives into the real-world tension between strict SemVer adherence and pragmatic compatibility promises, using the 2025 HTTP library conflict as a case study. Lucas and Luna explore how projects like curl, Node.js, and the Python packaging ecosystem navigate versioning disagreements, the role of community governance in resolving disputes, and why a minor bump can sometimes trigger a major rebuild. If you've ever been burned by a dependency update that broke your build despite a 'minor' version increment, this conversation will give you concrete tools for evaluating package risk. Plus, a brief reflection on why keeping this show ad-free matters for honest technical conversations.

#SemanticVersioning #OpenSource #DependencyManagement #BreakingChanges #curl #NodeJS #PythonPackaging #PackageManagers #VersioningDisputes #CommunityGovernance #SoftwareEngineering #TechPodcast #FexingoBusiness #BusinessPodcast #OpenSourceWithFexingo #Technology #DeveloperExperience #Compatibility

Keep every episode free: buymeacoffee.com/fexingo

Episode 96 of Open Source with Fexingo dives into the often-overlooked world of open source license compliance at enterprise scale. Lucas and Luna explore how projects like Linux and Kubernetes manage thousands of dependencies with differing licenses—GPL, MIT, Apache, and more. They break down real-world challenges: the 2023 lawsuit over Vizio's GPL violations, the role of tools like FOSSA and Snyk, and why even well-meaning companies trip up on copyleft terms. Packed with concrete examples and practical takeaways for developers and legal teams alike.

#OpenSource #LicenseCompliance #Copyleft #GPL #MITLicense #ApacheLicense #Linux #Kubernetes #FOSSA #Snyk #SoftwareSupplyChain #CompetitiveCompliance #GPLEnforcement #SPDX #OpenSourceGovernance #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 95 dives into governance forking in open source: when a community splits not over code but over decision-making processes. Lucas and Luna examine the case of Vibe, a Python-based package for audio processing, where a governance fork created two coexisting leadership models. They discuss what sparked the split — a dispute over maintainer veto power — and how both forks have evolved with different contribution norms, release cycles, and conflict resolution rules. The hosts explore broader implications for community health, contributor retention, and the tension between efficiency and inclusivity. Along the way, they touch on similar patterns in other projects like the GNOME and KDE split and the more recent OpenTofu fork of Terraform. Listeners will learn practical signs of governance friction and what projects can do to avoid a fork or manage one productively.

#OpenSource #GovernanceForking #VibeProject #CommunityGovernance #MaintainerConflict #ConflictResolution #Forking #Python #AudioProcessing #OpenTofu #Terraform #GNOME #KDE #DecentralizedDecisionMaking #TechPodcast #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Maintainer burnout is a silent crisis in open source. In this episode, Lucas and Luna dig into the specific structures that help — or fail — to prevent it. They look at the Python project's governance model, which uses a steering council to distribute decision-making, and contrast it with the BDFL (Benevolent Dictator for Life) model that concentrated power in one person. They also examine how the Node.js project handled burnout after the io.js fork, and what the Linux kernel's 'no holidays' culture reveals about sustainability. The conversation lands on concrete practices: rotating maintainer roles, clear time-off policies, and funded part-time maintainerships. Listeners will come away with a framework for evaluating whether an open source project is built to last or built to burn people out.

#OpenSource #MaintainerBurnout #DeveloperWellness #BurnoutPrevention #Python #NodeJS #Linux #BDFL #SteeringCouncil #CommunityGovernance #SustainableDevelopment #TechCulture #MaintainerMentalHealth #FexingoBusiness #BusinessPodcast #Fexingo #Technology #OpenSourceGovernance

Keep every episode free: buymeacoffee.com/fexingo

Every open source project depends on others—but what happens when a critical upstream library breaks your build or changes its license? In this episode, Lucas and Luna dig into the real-world mechanics of dependency conflict management. They walk through the 2023 axios vulnerability, where a single critical JavaScript HTTP library stalled thousands of projects, and contrast it with how the Rust ecosystem handles dependency resolution with Cargo's lockfile and semver compliance. They explore the maintainer's dilemma: fork it, patch it, or pressure the upstream? And they get honest about the emotional toll—the 'dependency dread' that comes with every `npm install` or `cargo update`. This is the inside story of the invisible supply chain that makes open source work.

#OpenSource #DependencyHell #SupplyChainSecurity #JavaScript #Rust #Cargo #npm #axioz #SemVer #Lockfile #MaintainerBurnout #Forking #Upstream #CommunityGovernance #SecurityVulnerability #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Open Source with Fexingo, Lucas and Luna explore how open source projects navigate the wide range of motivations that bring contributors to the table — from hobbyists coding for fun to professionals paid by employers, from documentation writers to issue triagers. Using the Kubernetes project as a concrete case, they discuss how different contribution paths can coexist without friction, the role of contributor ladders and recognition systems, and what happens when motivations clash, such as when a paid contributor's priorities don't align with the community's. The episode also touches on how projects like Mozilla and Python have structured contribution guidelines to welcome diverse incentives. A listener-funded segment highlights how Buy Me a Coffee dot com slash fexingo supports ad-free episodes like this one. Perfect for anyone curious about what really drives people to build open source software.

#OpenSource #ContributorMotivation #Kubernetes #Mozilla #Python #CommunityManagement #VolunteerContributors #PaidContributors #ContributionLadder #Incentives #Technology #Podcast #FexingoBusiness #BusinessPodcast #OpenSourceWithFexingo #LucasAndLuna #Episode92 #AdFree

Keep every episode free: buymeacoffee.com/fexingo