Deno team joins Cloudflare, Deno Deploy shuts down in six months
Deno is merging its self-hosted Workers runtime with Cloudflare workerd. Deno Deploy closes in six months and the open-source Deno runtime gets one more year of fixes.
Tagged
Open Source
From The Wire
A Chinese state hacking group is still exploiting decade-old CVEs
CISA, the FBI and NSA say Flax Typhoon combines mass scanning with hands-on attacks against unpatched GitLab, Struts, BIND and Exchange servers.
Anthropic's free OSS Scanner hunts bugs in open-source projects
Maintainers can enrol their project for periodic vulnerability scans from Claude, with a proof of concept and a suggested fix, aiming for a 90%+ true-positive rate.
GitHub pull request limits now count draft PRs too
Maintainers can cap how many open PRs a low-trust contributor can hold at once. Drafts were exempt until today, which made them an easy way around the cap.
OpenSSH 10.6 blocks risky usernames and drops compression
The release refuses backslash and dollar characters in command-line usernames, disables LZ77 compression over a side-channel leak, and starts deprecating scp -R.
Liquid AI's d1 models answer without writing a single token
d1-3B and d1-omni-600M are open-weight "decision models" that skip text generation entirely, returning a calibrated answer in one forward pass in as little as 8ms.
Google's EmbeddingGemma 2 embeds text, images and audio on-device
A 740M-parameter open model maps five modalities into one vector space, runs in under 600MB of RAM, and ships under Apache 2.0.
Reflection AI ships Beam, a 501B open-weight model
A sparse mixture-of-experts model with 23B active parameters and a context window extendable to 1M tokens, licensed Apache 2.0, with weights due later this month.