open-source maintainers

QGIS, the open-source geographic information system project, has enacted a moratorium on AI-generated contributions. The decision, formalised through a change proposal on the project's GitHub, restricts code and documentation submissions produced with AI tools. The move has drawn attention on developer forums, where commenters are debating whether such bans protect project quality or slow adoption of useful tooling, and whether other open-source projects will follow suit.

nvm, the open-source Node Version Manager maintained under the nvm-sh organisation, is gaining attention among developers. The tool is a POSIX-compliant bash script that lets programmers install and switch between multiple active versions of Node.js on the same machine, making it a staple for JavaScript development workflows and environment management.

CoMaps, a community-driven fork of the open-source navigation app Organic Maps, is gaining attention online. Built on OpenStreetMap data and available for Android and iOS, the project positions itself as an improved continuation of Organic Maps, which has faced internal disputes among its maintainers.

Kcgi, a minimal open-source library for writing CGI and FastCGI applications in C and C++, is drawing attention among developers. Maintained by Kristaps Dzonsons and hosted on bsd.lv, the library offers a lightweight, security-focused way to build web backends in C without heavier frameworks. Programmers are discussing its usefulness for small, fast, dependency-free web services.

Linus Torvalds has reportedly merged his first patch series in which a large language model assisted with the work, according to LWN. The news has drawn attention across developer communities, with commenters debating what it signals about AI's growing role in Linux kernel development and whether tooling like this will become routine for kernel maintainers.

The QGIS open-source mapping project has moved to ban AI-assisted contributions, setting out the policy in a proposal on its official enhancement repository. The decision means code, documentation or other contributions generated with AI tools are no longer accepted. Discussion is focusing on how the project will verify submissions and whether other open-source communities will follow suit.

Free and open-source software users are compiling alternatives to FOSS projects that have adopted or support large language models and AI features, sharing the list on Codeberg under the 'ethical foss' banner. The effort also offers guidance on requesting clearer AI policies from project maintainers or forking projects that refuse to change course.

The passagemath project has released version 10.8.13 of its open-source mathematics system, a pip-installable, modularized and portable fork of SageMath built in Python. The release is published on GitHub, where the project maintains its codebase. Passagemath positions itself as a full-featured, compatible alternative for users who want SageMath's capabilities through standard Python packaging tools.

A Pidgin developer is describing the awkward reality of maintaining the open-source chat client: needing and holding far too many separate accounts across different chat networks. Pidgin, the veteran multiprotocol messaging app long associated with IRC and other protocols, remains in use by a niche community, and the comment highlights the fragmentation of modern messaging that made multi-network clients appealing in the first place.

Strands Box, a new open-source sandbox for running AI agents, has been released, according to Help Net Security. The tool is designed to give developers an isolated environment for testing and running AI agents safely. Details on who maintains the project and its exact features were not provided in the available coverage.

The GnuTLS Project has been added as a CVE Numbering Authority, giving it the ability to assign CVE identifiers for vulnerabilities in GnuTLS and associated software projects, including libtasn1 and p11-kit. The announcement was made via the official CVE Program on 13 October 2026. The move means security issues in these widely used cryptographic and PKI libraries can now be disclosed and tracked directly by the project that maintains them.