Unauthenticated remote code execution in OpenCode

kept by eddie jan 14

OpenCode's unauthenticated HTTP endpoint allows remote code execution, sparking criticism over its security practices and maintainer responsiveness.

GitHub - anomalyco/models.dev: An open-source database of AI models.
Models.dev is an open-source, community-contributed database of AI model specifications, pricing, and capabilities, accessible via API and TOML data files.
also on SST, OpenCode, #open-source, #developer-tools
Tell HN: YC companies scrape GitHub activity, send spam emails to users
YC companies such as Run Anywhere scrape GitHub commit metadata to send unsolicited marketing emails to developers, violating GDPR and GitHub's terms of service.
also on Y Combinator, #tech-community, #developer-tools
Young Tech Founders Are Dumping Their Girlfriends and Going Monk Mode - Business Insider
Young founders are ending relationships to focus on their AI startups, driven by the belief that the AI boom demands total dedication.
also on Y Combinator, #tech-community
Introducing Supabase Evals
Supabase open-sourced evals, a benchmark testing AI coding agents on real Supabase tasks like schema building and debugging, to measure and improve agent performance across its platform.
also on OpenCode, #open-source, #ai-coding, #developer-tools
State of CLI Coding Agents, Mid-2026
The CLI coding agent market in mid-2026 is crowded with 35+ tools, and this piece systematically compares them across model labs, platform CLIs, and open-source harnesses.
also on OpenCode, #open-source, #ai-coding, #developer-tools