Reading up on GitHub

GitHub scanned its 14k internal repos, gave every active repo a validated owner via custom properties, archived ~8k unused ones, and enforced ownership at creation within 45 days.

Building a practical Slack agent required 100k lines of TypeScript and four months of iteration to handle serverless constraints, credential management, and secure tool orchestration.

Commit History visualizes any GitHub user's cumulative public commits over their entire lifetime as a chart, similar to star-history.com but for commits.

AI agents can automate administrative overhead like syncing tools and tracking metrics, freeing humans for strategic work.

The article argues that software is truly made during the messy, unstructured work between commits, and proposes a tool like DeltaDB to capture that process for review.

VS Code agent hooks provide deterministic shell commands that trigger on specific agent-loop events, enabling guaranteed follow-up automation like regenerating types after editing wrangler.jsonc.

Linear Agent can now write and review code using Claude Code and Codex, enabling end-to-end issue-to-ship workflows from within Linear.

A developer built a free, open-source browser-based tool that converts SQL CREATE TABLE statements into interactive ER diagrams without uploading data to any server.

A researcher found 10,000 GitHub repositories distributing Trojan malware, likely targeting AI coding agents that automatically clone and run dependencies.

Anthropic's Claude Design overhaul adds design system imports, Claude Code integration, and shared token limits to reposition the tool from a viral demo into an enterprise design-to-code platform.

Vercel Connect replaces long-lived provider tokens with runtime, scoped, short-lived credentials accessed via OIDC for agents and apps.

A fake recruiter sent a LinkedIn job candidate a GitHub repo with a backdoor that executes on npm install by running a remote-controlled command payload hidden in a test file.

Anthropic launches Claude Fable 5, a safety-nerfed Mythos-class model for general use, and Mythos 5 for vetted cyber defenders, both at half the price of Mythos Preview.

GitHub COO Kyle Daigle discusses how AI agents caused platform activity to surge 1400% in 2026, straining infrastructure and forcing GitHub to rethink open-source social contracts and reliability.

A practical checklist for evaluating npm packages in 2026 covering security, maintenance, provenance, CI quality, and incident response to make informed dependency decisions.

After finding malware-spreading GitHub repos, the author received AI-generated replies from other users, illustrating the erosion of genuine human communication online.

Websites should not override native browser behaviors for scrolling, navigation, text selection, or form controls, as doing so harms usability and breaks user expectations.

TeamPCP has automated its supply chain attacks with the Mini Shai-Hulud worm, breaching GitHub, OpenAI, and hundreds of firms.

The piece enumerates dozens of distinct ways open-source projects become effectively dead, from maintainer abandonment to sabotage and ecosystem shifts.

The author details how Codex's durable threads, voice input, steering, memory vaults, heartbeats, and goals transform ephemeral AI chats into persistent, self-running workstreams for coding, knowledge work, and even customer service.

A repository used Git's --author flag with a captcha-based CI script to require prior contributions before allowing pull requests, blocking over 500 AI bot spam attempts in the first week.

A website visualizes GitHub's outage history as a contribution graph heatmap, showing 47.2 hours of downtime over 47 days in the last year.

Tilde.run provides versioned, transactional sandboxes for AI agents, enabling rollbacks on code, S3 data, and Drive files with audited network calls.

AI-generated code is growing more competent, making it tempting to skip review and raising concerns about maintainability, trust, and long-term software quality.

Flat-rate AI subscriptions broke in April 2026 as agentic workloads caused unsustainable unit economics, forcing providers to shift to per-token billing.

Stacked commits, not monolithic PRs, are the correct unit of code review—a truth Gerrit knew in 2008 that AI's speed and tooling like Mergify Stack are now forcing GitHub to finally admit with its native stacked PRs feature.

This document defines the rules and idiom map for porting the Bun JavaScript runtime from Zig to Rust in a two-phase process: Phase A produces a draft Rust file, and Phase B makes it compile.

An open-source maintainer argues that AI-generated pull requests are more trouble than they're worth, preferring to implement features himself using LLMs rather than review low-quality contributions.

Ghostty creator Mitchell Hashimoto is moving the project off GitHub due to frequent outages and declining service quality since Microsoft's acquisition.

A tech-titan fantasy dream of building a new forge that fixes GitHub's flaws with stacked PRs, pre-commit feedback, flexible approvals, and tiny self-hostable units.

GitHub has become unreliable and slop-filled under Microsoft, prompting users to migrate to alternative Git forges.

Armin Ronacher argues that as GitHub declines due to instability and product churn, open source must preserve its history by moving to decentralized, archivally-funded homes that avoid the pre-GitHub era's fragility.

Ghostty's creator is leaving GitHub due to persistent outages and degraded service, despite a deep 18-year emotional attachment to the platform.

A collection of Hacker News commenters debate whether AI tools are causing engineering skill atrophy or merely exposing pre-existing mediocrity, with many arguing dependency is natural and the real issue is how AI is used.

GitHub now natively supports stacked pull requests within monorepos, enabling developers to break large changes into smaller, reviewable PRs.

A CMU study found 6 million fake GitHub stars, with VCs using star counts as funding signals, creating a self-reinforcing economy of purchased popularity.

GitHub now natively supports stacked pull requests, allowing developers to break large changes into small, reviewable layers with a stack map, cascading rebase, and a `gh stack` CLI.

A developer built a two-tier AI agent on a $7/month VPS using IRC as transport, enabling visitors to ask about his work with real code access instead of rephrased resume text.

Cursor is building local indexes for regular expression search to reduce agent wait times from 15-second ripgrep runs in large monorepos.

In the AI era, open source maintainers should use the 3 Cs framework to mentor strategically without burnout as contribution volume grows.

GitHub markets its AI-powered platform, featuring Copilot for code writing and agent mode, collaboration tools, and AI-driven security, as essential for modern software development.

gists.sh replaces the default GitHub Gist page with a clean, minimal viewer by simply swapping the domain in the URL.

Vercel Labs released OpenReview, an open-source, self-hosted AI code review bot that deploys to Vercel and uses Claude to provide on-demand PR reviews with inline suggestions and automated fixes.

Anthropic's Code Review service uses multi-agent analysis to catch logic errors, security flaws, and regressions in GitHub pull requests, posting findings as inline comments without blocking merges.

Cursor Automations let developers create always-on agents triggered by events (Slack, Linear, GitHub, PagerDuty, webhooks) to automate code review, monitoring, and maintenance tasks.

As AI makes applying, writing, and coding nearly costless, signal drowns in noise, rewarding volume over genuine effort and crushing the incentive to sacrifice for quality.

A prompt injection in a GitHub issue title tricked an AI triage bot into executing code, enabling cache poisoning, credential theft, and publication of a compromised Cline npm package that silently installed the OpenClaw AI agent on 4,000 developer machines.

YC companies such as Run Anywhere scrape GitHub commit metadata to send unsolicited marketing emails to developers, violating GDPR and GitHub's terms of service.

Vercel open-sourced Chat SDK, a TypeScript library for building chatbots across Slack, Discord, Teams, and more from a single codebase.

Commenters describe workflows that separate planning from execution when using AI coding tools like Claude Code, emphasizing structured documents and human oversight.

METR’s late 2025 experiment on AI developer productivity suffers from selection bias because many developers refuse to work without AI, yielding unreliable speedup estimates.

AI agents collapse the software development lifecycle into a tight loop of intent, build, observe, and repeat, making stages like requirements, testing, and code review obsolete.

Traditional GitHub-based collaboration can't scale with AI agent code volume, so the author open-sources AgentLogs, a platform to share and review agent transcripts.

Nebula is a shared workspace where teams build AI agents with tools and memory to automate workflows across inboxes, code, and APIs.

The release of advanced AI agents triggered a $285bn selloff in SaaS stocks, as markets priced in agents replacing per-seat software subscriptions with custom, outcome-driven workflows.

DoNotNotify, an Android app for granular notification control, has been open-sourced to demonstrate its privacy-first approach and invite community contributions.

Mitchell Hashimoto's Vouch project proposes a web-of-trust system for GitHub to combat low-quality AI-generated code slop.

Cursor built a multi-agent harness that recursively delegates coding tasks across planners and workers, achieving ~1000 commits per hour on a browser research project with minimal human intervention.

AI makes individual tasks faster but increases cognitive load through more tasks, constant review of probabilistic outputs, and relentless tool churn, leading to engineer burnout.

The author proposes defining a company's structure, roles, and processes as declarative code, enabling versioning, testing, and automation.

Vercel's new v0 brings production-ready AI coding to enterprises with git workflows, security, and real integrations for shipping software.

Stacked pull requests, managed with tools like Graphite, keep code review fast and team velocity high by breaking large work into small, independent, mergeable units.

SWE-Universe automatically constructs 807,693 real-world software engineering environments from GitHub PRs via iterative self-verification and in-loop hacking detection.

The article argues that MCP's value is in steering agents with rich context descriptions, that progressive disclosure is counterproductive, and that subagents may better manage context rot.

A maintainer proposes PRAS Bot, a signal-based triage tool that scores pull requests as likely-spam, needs-review, or looks-good to filter low-quality contributions on GitHub.

LLM coding tools have made code generation cheap and abundant, flipping the value from writing code to articulating problems and architecting solutions, fundamentally changing software development.

Author replaced a $120/year micro-SaaS with LLM-generated code in 20 minutes, highlighting risk for static SaaS that offers no ongoing value.

Google is testing voice cloning via a hidden UI option and GitHub repository import for AI Studio, hinting at upcoming native audio and developer tools.

A curated collection of testimonials showcases OpenClaw, an open-source AI agent that evolved from a weekend project into a widely-adopted personal assistant with persistent memory and cross-platform integration.

Simon Willison explains how to preview Claude Code web branch builds on private GitHub Pages repos for real-time mobile testing.

Kevin Murphy shares a systematic PR-reading method using the five Ws, including test-first review, to improve code review quality.

Repere is a local-first SQL data explorer that runs entirely in the browser via DuckDB WASM, enabling private, serverless spreadsheet-style querying and transformation of CSV, JSON, Parquet, or Excel files.

An unclosed loop in GitHub Actions workflows caused Gemini CLI's label-adding and -removing bots to fight over 4,600 times, flooding the issue with notifications.

Cognition launches Devin Review, an AI tool that organizes diffs, catches bugs, and enables live chat to solve the code-review bottleneck created by coding agents.

Skills and MCP tools serve different but complementary purposes for coding agent harnesses, and neither replaces the other despite hype cycles claiming otherwise.

Markdown became ubiquitous due to its simplicity, plain-text nature, and portability, despite ongoing standardization debates.

Just the Browser provides configuration files and scripts to disable AI features, telemetry, sponsored content, and other annoyances in Chrome, Edge, and Firefox using group policies.