Where open source communities live GitHub

Where open source communities live GitHub

There are millions of open source projects on GitHub. Joinone or start your own.

Open source software is free for you to use and explore. Get involved to perfect your craft and be part of something big.

Your contributions help make technology better for everyone, developers and non-developersalike.

Amazing developers use GitHub. Contribute code to projects that change how softwareisbuilt.

Whatever your skill level, working on open source software is a great way to learn newthings.

Open source is made by people just like you. Learn how to contribute, launch a new project, and build a healthy community of contributors.

Browse data from over 3,800 projects on the experiences and backgrounds of those who use and build open source software.

Whether you are new to code or ready to start a big project, there are a few ways to get involved in open source.

Learn how developers build and maintain open source software. You can watch a project that interests you to see its progress as it happens.

You dont have to build everything from scratch. Make copies of your favorite projects, experiment in private repositories, and tailor tools and features to meet your needs.

Make a suggestion, fix a bug, improve documentation, or contribute code to a project. Even asking questions helps.

Open source software is made by people just like you. Heres how they gotstarted.

Katrina Owen created Exercism, a platform to gain fluency in programming languages, to solve her own needs. Today, Exercism supports more than 50 programming languages, written and used by developers in over 190 countries.

Whatever your interestwhether its mobile apps or astrophysicstheres an open source project foryou.

Start exploring now

Were building developer tools alongside you. We hope they help you perfect your process, work on projects of any size, and share ideas with your friends and coworkers. Take them for a spin or help us build them.

Atom is a hackable text editor for the 21st century, built on Electron, and based on everything we love about our favorite editors.

Hubot is a chat bot, modeled after GitHubs Campfire bot, hubot. Hes pretty cool. Hes extendable with scripts and can work on many different chat services.

Git LFS is a command line extension and specification for managing large files with Git.

Public and open source projects are free to start, maintain, and contribute to. Add advanced collaboration tools to your private repositories for $7/month.

Sign up for GitHub

Be the first to hear about GitHubs latest open source tips and resources.

Link:

Where open source communities live GitHub

The Open Source Definition (Annotated) | Open Source Initiative

The indented, italicized sections below appear as annotations to the Open Source Definition (OSD) and are not a part of the OSD. A plain version of the OSD without annotations can be found here.

Open source doesn't just mean access to the source code. The distribution terms of open-source software must comply with the following criteria:

The license shall not restrict any party from selling or giving away the software as a component of an aggregate software distribution containing programs from several different sources. The license shall not require a royalty or other fee for such sale.

Rationale: By constraining the license to require free redistribution, we eliminate the temptation for licensors to throw away many long-term gains to make short-term gains. If we didn't do this, there would be lots of pressure for cooperators to defect.

The program must include source code, and must allow distribution in source code as well as compiled form. Where some form of a product is not distributed with source code, there must be a well-publicized means of obtaining the source code for no more than a reasonable reproduction cost, preferably downloading via the Internet without charge. The source code must be the preferred form in which a programmer would modify the program. Deliberately obfuscated source code is not allowed. Intermediate forms such as the output of a preprocessor or translator are not allowed.

Rationale: We require access to un-obfuscated source code because you can't evolve programs without modifying them. Since our purpose is to make evolution easy, we require that modification be made easy.

The license must allow modifications and derived works, and must allow them to be distributed under the same terms as the license of the original software.

Rationale: The mere ability to read source isn't enough to support independent peer review and rapid evolutionary selection. For rapid evolution to happen, people need to be able to experiment with and redistribute modifications.

The license may restrict source-code from being distributed in modified form only if the license allows the distribution of "patch files" with the source code for the purpose of modifying the program at build time. The license must explicitly permit distribution of software built from modified source code. The license may require derived works to carry a different name or version number from the original software.

Rationale: Encouraging lots of improvement is a good thing, but users have a right to know who is responsible for the software they are using. Authors and maintainers have reciprocal right to know what they're being asked to support and protect their reputations.

Accordingly, an open-source license must guarantee that source be readily available, but may require that it be distributed as pristine base sources plus patches. In this way, "unofficial" changes can be made available but readily distinguished from the base source.

The license must not discriminate against any person or group of persons.

Rationale: In order to get the maximum benefit from the process, the maximum diversity of persons and groups should be equally eligible to contribute to open sources. Therefore we forbid any open-source license from locking anybody out of the process.

Some countries, including the United States, have export restrictions for certain types of software. An OSD-conformant license may warn licensees of applicable restrictions and remind them that they are obliged to obey the law; however, it may not incorporate such restrictions itself.

The license must not restrict anyone from making use of the program in a specific field of endeavor. For example, it may not restrict the program from being used in a business, or from being used for genetic research.

Rationale: The major intention of this clause is to prohibit license traps that prevent open source from being used commercially. We want commercial users to join our community, not feel excluded from it.

The rights attached to the program must apply to all to whom the program is redistributed without the need for execution of an additional license by those parties.

Rationale: This clause is intended to forbid closing up software by indirect means such as requiring a non-disclosure agreement.

The rights attached to the program must not depend on the program's being part of a particular software distribution. If the program is extracted from that distribution and used or distributed within the terms of the program's license, all parties to whom the program is redistributed should have the same rights as those that are granted in conjunction with the original software distribution.

Rationale: This clause forecloses yet another class of license traps.

The license must not place restrictions on other software that is distributed along with the licensed software. For example, the license must not insist that all other programs distributed on the same medium must be open-source software.

Rationale: Distributors of open-source software have the right to make their own choices about their own software.

Yes, the GPL v2 and v3 are conformant with this requirement. Software linked with GPLed libraries only inherits the GPL if it forms a single work, not any software with which they are merely distributed.

No provision of the license may be predicated on any individual technology or style of interface.

Rationale: This provision is aimed specifically at licenses which require an explicit gesture of assent in order to establish a contract between licensor and licensee. Provisions mandating so-called "click-wrap" may conflict with important methods of software distribution such as FTP download, CD-ROM anthologies, and web mirroring; such provisions may also hinder code re-use. Conformant licenses must allow for the possibility that (a) redistribution of the software will take place over non-Web channels that do not support click-wrapping of the download, and that (b) the covered code (or re-used portions of covered code) may run in a non-GUI environment that cannot support popup dialogues.

The Open Source Definition was originally derived from the Debian Free Software Guidelines (DFSG).

Version 1.9, last modified, 2007-03-22

Read the original here:

The Open Source Definition (Annotated) | Open Source Initiative

GitHub to sunset open-source text editor Atom later this year – Siliconrepublic.com

The company has set 15 December as the last official day Atom will be in operation. But a successor is in sight.

After more than a decade of helping software developers write code, GitHub is archiving its open-source text editor Atom to focus on cloud-based alternatives.

Launched in 2011, Atom is a free and open-source text and source code editor for software developers working on a range of operating systems.

The Atom software development environment laid the foundation of the Electron framework which has paved the way for thousands of apps, according to GitHub, including Microsoft Visual Studio Code, Slack and GitHub Desktop.

Now, GitHub has announced that it is officially sunsetting Atom and archiving all associated projects on 15 December, 2022.

When we introduced Atom in 2011, we set out to give developers a text editor that was deeply customisable but also easy to use one that made it possible for more people to build software, the company said.

While that goal of growing the software creator community remains, weve decided to retire Atom in order to further our commitment to bringing fast and reliable software development to the cloud via Microsoft Visual Studio Code and GitHub Codespaces.

GitHub said Atom has not had any significant feature development for the past several years, despite sporadic maintenance and security updates for developers still using the editor.

We recognise that Atom is still used by the community and want to acknowledge that migrating to an alternative solution takes time and energy, GitHub said.

Microsoft, which acquired GitHub for $7.5bn in 2018, launched its Visual Studio Code text editor in 2015 to compete with Atom. Since the acquisition, VS Code has gained popularity and now has a significant hold of the market share, while Atoms popularity has dwindled.

As new cloud-based tools have emerged and evolved over the years, Atom community involvement has declined significantly, said GitHub.

The legacy of Atom may yet live on through a successor, however. TechCrunch reported that one of Atoms core contributors, Max Brunsfeld, is leading an effort to launch a new, lightning-fast collaborative code editor called Zed.

10 things you need to know direct to your inbox every weekday. Sign up for theDaily Brief, Silicon Republics digest of essential sci-tech news.

See original here:

GitHub to sunset open-source text editor Atom later this year - Siliconrepublic.com

GIMP: the free, open-source software option for photo editing – TechHQ

Since being first cultivated by special effects engineers at visuals house Industrial Light & Magic to produce an array of practical effects shots for the original Star Wars films in the 20th century, the photo editing software Photoshop has continued to be a significant presence in the 21st century.

From pioneering revolutionary image enhancement techniques to creating a whole stable of toolkits and editing methods, Adobes Photoshop (PS) has become synonymous as the premier photo editing software for commercial and even personal image enhancement. It works just as well on bespoke birthday card imagery as it does on professional layouts like ad posters and restaurant menus.

Along with Illustrator, Photoshop creator Adobe has spawned an entire suite of photo, video, and creative tools, from prepping materials to be edited, right down to post-production editing. But while Photoshop might be ubiquitous as the primary photo & image editing software for pro designers and studios, its success has also come with drawbacks that might not make it the most accessible tool on the market especially for novices, amateur content creators, or those on limited budgets.

While there are many alternatives out there when it comes to photo editing software ranging from browser-based tools to bundled software that comes preinstalled on cellphones one of the standout programs that sets itself to be a genuine challenger to PS is GIMP, the GNU Image Manipulation Program.

Plugins can be downloaded to flesh out GIMPs functionality to be more like Photoshop. Source: TechHQ

GIMP has been called a Photoshop-killer for many reasons, but one of the primary ones is that the open-sourced software is essentially free to distribute and use. Until very recently when Adobe Creative Cloud allowed subscriptions to Adobe software for as little as US$10 a month, Photoshop developed a reputation as being exorbitantly expensive.

With a one-time fee approaching US$700, Adobe was very aware it had the flagship photo editing software on the market and charged accordingly. The first benefit to using GIMP is that it can be tested out with no upfront commitment, and, unlike Photoshop, downloading and running GIMP takes up very little PC processing power. That makes it suitable to run on last-generation or even veritably old hardware.

Photoshop is one of the heaviest and most demanding editing tools for imagery, with designers often decrying its steep system demands, not just to run the software, but to render and store processed images. This might be less cumbersome on an office iMac, with storage and RAM paid for by the company, but it can still be extremely prohibitive for the small design studio or the enthusiastic amateur.

While Photoshop can usually want up to 4GB of hard disk space, GIMP takes as little as 20MB. Not only is GIMP much smaller to store and run, it is also way faster to install and set up. This writer was able to source the GIMP .exe file and download it locally, and finish setting up all within 15 minutes. There are versions for Mac, Windows and Linux, and the source code is available to compile from scratch, should that be your idea of fun.

Many of the same core functions as Photoshop are available except for the low, low price of absolutely free. Source: TechHQ

Once fully installed, it is highly customizable on many levels, including the user interface. This might be something that was inspired by Photoshop, but Photoshop has come to have to cover a wide gamut of design disciplines, and so contains many hundreds of features its accrued over the years. For relative beginners there are, for instance, lighting effects that may not get much use but its good to know they are there.

GIMP clears away a lot of feature clutter, with tools that you are unlikely to utilize being easily removed or minimized from the main UI. The customizability of its features extends beyond managing the interface, and because of its open-source code, there is a thriving catalog of independent plug-ins or extensions that can be downloaded and added to the core application.

For example, there is a Heal Selection featurette that can be downloaded, to perform the same function as Smart Remove that is built-in on Photoshop. So even though Photoshop is kitted out with every feature from bow to stern, a lot of it might be surplus to regular requirements but if you ever need a super-specific capability that Photoshop has, you can bet the open-source community has created something similar, or maybe even better, for GIMP.

For an untrained, unpracticed Luddite like myself, playing around with Photoshop can be pretty daunting. Not only are there scores and scores of features and adjustments that can be made to an image, even performing the same repeat functions can be challenging if one has not memorized the order to perform them in. It can almost seem like trying to play particularly complex sheet music transcriptions of hard-bop jazz.

Despite being so much lighter to install and run in contrast (no pun intended) to Photoshop, a lot of the color palettes, masks, and layers can often be indistinguishable between GIMP and Adobes premier software. Source: TechHQ

A lot of usability is boiled down in GIMP, made more user-friendly (read, idiot friendly) and is significantly easier to pick up for a photo editing software rube indeed, its much easier for anyone, even for someone with only a passing familiarity with photography disciplines and terminology.

For instance, conducting repeat actions (or batch process) on a big collection of photos is easily performed on GIMP. This could be an important commercial function, as repeating processing with the same tints or themes that fit a companys branding or campaign direction might be whats called for; and no doubt called for on a tight deadline.

But inexplicably, batch processing on Photoshop is an unwieldy and cumbersome process, requiring setting everything up with preprogrammed actions. And for the uninitiated, that could take a long time, plus theres the unavoidable waiting for everything to be processed. Thats often followed by finding out later that the group edits didnt take on a bunch of images. Problems like these are, admittedly, pilot error, but in business settings where time is short, the ability to make fast edits can be pretty important. Clients dont like delays one bit.

But while both photo editing software suites have excellent features support, it must be said that some of the more powerful shared tools work better in Photoshop. Features like pixel manipulation are much more powerful and granular on Photoshop, owing no doubt to the more powerful processing the program relies on from the more modern hardware stipulated in its specifications sheet.

Another drawback with GIMP is it lacks some diversity when it comes to color modes and file formats. Like to print final artworks, using the CMYK color mode is necessary GIMP only processes using the Red Green Blue (RGB) mode by default; print designers will need a further plug-in to print imagery with accurate colors.

GIMP only processes using the Red Green Blue (RGB) mode, a further plugin would be needed to print using Cyan Magenta Yellow Key (CMYK), the preferred printing color mode. Source: TechHQ

And with Photoshop, any edits are saved as a separate exported file, preserving the original. To the uninitiated like me using GIMP for the first time, unwittingly pressing save would actually overwrite the original file, meaning I would now have an edit without the base file. Exporting edits as a separate file can be done, but it is not straightforward.

But of course, there is a far larger team working constantly on Photoshop, upgrading its capabilities as one of the most dominant photo editing softwares of all time. With Adobe Creative Cloud, new updates are auto pushed to subscribers, and can be downloaded seamlessly.

By contrast, the GIMP team of freelance developers from the open-source community work hard, but their results are nowhere near as large or well-provisioned as the Adobe crews. Nevertheless, considering the differing capacities, it is astounding that the GIMP team still manages to roll out new updates every few months, just like Adobe. Having said all that, GIMP is due for a big update soon, to version 3.0. Watch out for that.

So when the dust settles, is GIMP a genuine alternative to Photoshop? GIMP is extremely worthy, especially for beginners or those who have just basic editing needs of professional quality and with a range of aesthetic functionality including filters, opacity, transformations, saturation, and brightness contrasts. Its filters and certain modes are not as refined as Photoshops but it is still a very handy and sophisticated palette to work with. Approaching Photoshops polish and sophistication in some aspects, GIMP is most certainly worth much, much more than its asking price which is, theoretically, nothing at all. Of course, if you use GIMP and find it useful, sending a few dollars to the projects maintainers will help assure that development continues.

More:

GIMP: the free, open-source software option for photo editing - TechHQ

How open source is fast becoming an innovative platform for digital transformation in Qatar – The Peninsula

Open source solutions are accelerating the innovation and adoption for cloud, big data and analytics, the Internet of Things (IoT), artificial intelligence (AI) and blockchain. An agile, cost-effective and flexible alternative to proprietary software there is no better way to achieve connectivity on a massive scale without relying on open source frameworks and platforms within digital infrastructures.

As most countries in the Middle East activate national digital transformation initiatives to drive economic diversification, open source solutions will continue to gain momentum across the region. Open source is becoming increasingly omnipresent across the IT stack, particularly as organisations look to drive innovation while maintaining operational and cost efficiencies.

The State of Enterprise Open Source 2022 report revealed that not only is the open source development model showing no signs of slowing down, it has actually accelerated during the pandemic.

The report, which explores why enterprise leaders are choosing the open source development model and technologies built with this model, found that 92 percent of IT leaders surveyed feel enterprise open source solutions are important to addressing their COVID-related challenges.

As organisations build out their digital competencies to gain a competitive edge, improve customer engagement, and enhance their services, they are increasingly extending their infrastructure and applications to run on cloud.

Whether an intentional architecture choice or a result of rapid market changes, cloud computing and always-on services built using the open source development model and open source code are increasingly crucial to nearly every organisation regardless of industry.

In fact, 89 percent of respondents believe that enterprise open source software is as secure or more secure than proprietary software. Anyone who has spent time in the IT industry will recognise that this is a significant shift from mainstream perceptions about open source software from a decade or so ago when open source software security often surfaced as a weakness.

The use of open source will continue to rise as organisations increasingly adopt agile development frameworks and tools to modernise existing applications and build new, cloud-native applications or services.

Awareness of open source in the Middle East has risen significantly in recent years. In fact, new technologies are set to play a major role in achieving key objectives of Qatar Digital Government strategy to increase government openness and generate economic and political value by collaborating with customers. To this end, government entities, research and educational institutes, and open source IT vendors have been playing an active role in promoting both the awareness and use of open source across the region.

Red Hats annual survey revealed that 82 percent of IT leaders globally are more likely to select a vendor who contributes to the open source community. Data also revealed the top reasons why enterprise open source vendors are preferred: They are familiar with open source processes (49 percent); They help sustain healthy open source communities (49 percent); They can influence the development of features that we need (48 percent); and They are going to be more effective if I face technical challenges (46 percent).

Across the Middle East, sectors such as telecommunications, banking and financial services, education, and healthcare have been using open source to optimise and simplify operations, reduce costs, and facilitate their digital agendas. As digital transformation and cloud become mainstream in the Middle East, demand for open source solutions and skills will intensify.

Unsurprisingly, the increasing use of enterprise open source extends to important new emerging technology workloads, with 80 percent planning to increase their use of enterprise open source in areas such as artificial intelligence (AI), machine learning (ML), edge computing, and the Internet of Things (IoT).

As organisations in Qatar increasingly pursue digital transformation and innovation, open source adoption will have a pivotal role to play. Organisations should consider working with established commercial open source solution providers and their channel ecosystems in order to secure the support and skills needed to adopt open source solutions.

See the article here:

How open source is fast becoming an innovative platform for digital transformation in Qatar - The Peninsula

In Search of Coding Quality – InformationWeek

Quality is an elusive goal. Ask a thousand coding managers to describe quality and there's a strong chance you'll receive approximately the same number of definitions.

When I think about good quality code, three characteristics come to mind: readability, consistency, and modularity, says Lawrence Bruhmuller, vice president of engineering at Superconductive, which offers an open-source tool for data testing, documentation, and profiling.

Bruhmuller believes that code should be easily accessible by all parties. That means clear naming of variables and methods and appropriate use of whitespace, he explains. Code should also be easy enough to follow with only minimal explanatory comments. A codebase should be consistent in how it uses patterns, libraries, and tools, Bruhmuller adds. As I go from one section to the other, it should look and feel similar, even if it was written by many people.

There are several techniques project leaders can use to evaluate code quality. A relatively easy way is scanning code for unnecessary complexity, such as inserting too many IF statements in a single function, Bruhmuller notes. Leaders can also judge quality by the number of code changes needed to fix bugs, revealed either during testing or by users. However, its also important to trust the judgment of your engineers, he says. They are a great judge of quality.

The major difference between good- and poor-quality coding is maintainability, states Kulbir Raina, Agile and DevOps leader at enterprise advisory firm Capgemini. Therefore, the best direct measurement indicator is operational expense (OPEX). The lower the OPEX, the better the code, he says. Other variables that can be used to differentiate code quality are scalability, readability, reusability, extensibility, refactorability, and simplicity.

Code quality can also be effectively measured by identifying technical-debt (non-functional requirements) and defects (how well the code aligns to the laid specifications and functional requirements, Raina says. Software documentation and continuous testing provide other ways to continuously measure and improve the quality of code using faster feedback loops, he adds.

The impact development speed has on quality is a question that's been hotly debated for many years. It really depends on the context in which your software is running, Bruhmuller says.

Bruhmuller says his organization constantly deploys to production, relying on testing and monitoring to ensure quality. In this world, its about finding a magic balance between what you find before pushing to production, what you find in production, and how long it takes you to fix it when you do, he notes. A good rule of thumb is that you should only ship a bad bug less than 10% of the time, and when you do you can fix it within an hour.

There must never be a trade-off between code quality and speed, Raina warns. Both factors should be treated as independent issues. Quality and speed, as well as security, must be embedded into the code and not treated as optional, non-functional requirements, he states.

The best way to ensure code quality is by building software that delights your users, Bruhmuller says. This is best done at the team level, where a self-managing team of engineers can look at various metrics and realize when they need to address a code quality problem, he suggests. Code quality tools and technology can play a supporting role in allowing teams to measure and improve.

Aaron Oh, risk and financial advisory managing director in DevSecOps at business consulting firm Deloitte, warns developers about the misconception that good code quality automatically means secure code. Well-documented, bug-free and optimized code, for example, may still be at risk if proper security measures aren't followed, he explains.

DevSecOps is all about shifting left, Oh says, integrating security activities as early in the development lifecycle as possible. As the developer community continues to improve code quality, it should also include security best practices, such as secure coding education, static code analysis, dynamic code analysis, and software composition analysis, earlier in the development lifecycle, Oh advises.

Ultimately, the best way to ensure code quality is by following recognized coding standards. This means that standard integrated developer environments (IDEs) must be routinely checked using a variety of tools as part of the organizations peer-code review process, Raina says.

Raina also believes that enterprises should set defined coding standards and guidelines that are then properly communicated to staff and incorporated into training. Quality gates must also be put in place across an organizations software development lifecycle to ensure there are no gaps in the baselines, he states.

Modern App Dev: An Enterprise Guide

Can AI Lead the Way in Low Code/No Code App Development?

Seismic Shifts in Software Development Still Need Hardware

More here:

In Search of Coding Quality - InformationWeek

Free DevTools that will make your development easier – Geektime

To hit the market as fast as possible companies, leverage substantial amounts of software components, existing code, and third-party software, some of them paid and some of them Open Source. This is to save time, redundant developments, and numerous bugs in the code.

These tools help with the product SaaS companies deliver, but also play a part in Monitoring stacks, maintaining production environments, development environments, and even in the management of business workflow. With the world, and the market, constantly changing, new best practices in the field of technology are arising. The focus is now on advanced assemblage of as many pre-built components as possible, for companies to hit the ground running.

Here is a list of development tools that can be used free of charge to facilitate the development work many companies need:

In the last decade, software development technologies have improved and matured by moving to the cloud and becoming distributed, containerized, and sometimes serverless. The problem is that a developers ability to get the data he or she needs to work and solve issues has made no advancements.

Rookout is addressing this issue by closing this gap. With the Rookout Live Debugger, engineers get instant access to debug data such as Logs, Traces, and Metrics. This enables them to visualize and gain insight into their code in production or any other environment, without stopping their application, reproducing the issue, or having to wait for a new deployment. This has become the de-facto method for fixing bugs faster and maintaining quality cloud-native applications.

Rookout was founded from the ground up to help developers overcome the debugging challenges derived from the digital transformation, as well as the new architecture and environment adoptions. Rookout is a tool that was created by developers for developers. Therefore, it's fast and easy to deploy and allows engineers to continue working in their regular workflows, as Rookout supports all environments and over 90% of software languages that are used. Rookout allows engineers to troubleshoot up to 5x faster and fix bugs with zero friction, overhead, or risk.

Whats more, is that community engagement is a core virtue at Rookout. They believe that giving back to the community is of utmost importance, so they offer young startups and individual developers the opportunity to use their free community tier, gain immediate access to debug data, and fix bugs faster. Click here to try Rookout for free

Swimm is a startup solving one of the biggest and most well-known development workflow pain points for companies and teams of all sizes.

As we know, it is very common for developers to work on code that they are not necessarily familiar with for example, when starting a new job, switching teams, joining an existing project, and on every change request or feature involving code that they didnt write themselves. Learning new code on your own is possible, but it takes a significant amount of time and effort.

The classic solution is documentation. But documentation is also problematic. The fundamental problem with documentation is that the documents are not coupled to the code. So, when code evolves and changes, and documentation is left behind and becomes outdated, there is usually little to no motivation for developers to continue working on documentation, and therefore not bringing others up to speed on such codebase in an organized fashion.

Swimm.io enables developers and teams to share what they know easily and create documents that embed references to the code, including snippets (lines of code), tokens (e.g., names of functions or classes, values), paths and more. The result is Walkthrough Documentation, which really helps developers understand and get a better understanding of the codebase.

With Continuous Documentation, Swimms platform keeps documentation in sync as code evolves. Moreover, Swimms platform connects to GitHub, IDE and CI and validates that docs are up to date on every PR and suggests automatic updates when needed. Since documentation is coupled to the code, Swimm can also connect lines of code to relevant documentation. With IDE plugins, you can see next to the code whether theres relevant documentation available to assist you.

Swimms platform is increasingly becoming part of developers workflows by allowing teams to create and maintain documentation that is always up to date as the code changes. Swimm helps management teams by ensuring that knowledge sharing continues seamlessly and easily with code-coupled auto-synced documentation. R&D teams are using Swimm to help onboard new developers so that knowledge silos never slow them down. Plus, Swimm uses a language-agnostic editor, so it is suitable for all programming languages. Check out Swimms free beta and see for yourself how easy it is to jump into the documentation pool.

Access control interfaces are a must-have in modern applications, which is the reason why many developers are spending time and resources trying to build them from scratch without prior DevSec experience. However, companies attempting to build these capabilities, like Audit Logs, Role Based Access Control (RBAC) and Impersonation, might find themselves spending months doing so. Even after the initial development, developers still need to keep maintaining the authorization system to fix bugs and add new features. Eventually, they find themselves rebuilding authorization again and again.

Security is also an issue; according to the latest research from the Open Web Application Security Project (OWASP), broken access control presents the most serious web application security risk. Failures typically lead to unauthorized information disclosure, modification, destruction of data, or performing a business function outside the user's limits. The report states that 94% of applications were tested for some form of broken access control.

Permit.io provides all the required infrastructures to build and implement end-to-end permissions out of the box so that organizations can bake in fine-grained controls throughout their organization. This includes all the elements required for enforcement, gating, auditing, approval-flows, impersonation, automating API keys and more, empowered by low-code interfaces.

Permit.io is built on top of the open-source project OPAL, also created by Permit.ios founders, which acts as the administration layer for the popular Open Policy Agent (OPA). OPAL brings open policy up to the speed needed by live applications; as an application state changes via APIs, databases, git, Amazon S3 and other 3rd-party SaaS services, OPAL makes sure in real-time every microservice is in sync with the policies and data required by the application.

Try out Permit.ios SaaS application for easy and immediate implementation and usage!

While in recent years Kubernetes adoption accelerated and it became the de-facto infrastructure of modern applications, theres still a real challenge with day two operations. As much as it's easy to deploy and make changes in K8s while facilitating an agile framework, it's that much harder to troubleshoot K8s and resolve incidents at scale. With so many changes in the system every day, it can be overwhelmingly complex to pinpoint the root cause. Incident responders spend untold amounts of hours, even days, trying to solve an issue while the end-users experience latency or downtime.

There are several tools that attempt to take away some of the complexity of Kubernetes, but there are also several tools that add new functionality on top of Kubernetes, which further increases the complexity and increases the amount of knowledge a user needs to operate it. Komodors platform adds in all the necessary intelligence and expertise required to make any engineer a seasoned Kubernetes operator.

Komodors automated approach to incident resolution accelerates response times, reduces MTTR, and empowers dev teams to resolve issues efficiently and independently. The platform ingests millions of Kubernetes events each day and then puts the key learnings directly into the platform. The company recently launched Playbooks & Monitors that will alert on emerging issues, uncover their root cause, and provide the operators with simple-to-follow remediation instructions.

Written by Demi Ben-Ari, Co-Founder & CTO of Panorays

See original here:

Free DevTools that will make your development easier - Geektime

Chainguard Secure Software Supply Chain Images Arrive The New Stack – thenewstack.io

Its easy to talk about securing the software supply chain. The trick is actually doing it. Now, Chainguard, the new zero trust security company, in order to make the software supply chain secure by default, has released Chainguard Images.

Chainguard Images are container base images designed for a secure software supply chain. They do this by providing developers and users with continuously updated base container images with zero-known vulnerabilities.

These images are based on Chainguards open source distroless image project. These are minimal Linux images based on Alpine Linux and Busybox. By cutting all but absolutely necessary software elements, Chainguard Images have the smallest possible attack surfaces.

While these open source images dont have Chainguards guarantees, they are continually updated and kept as bare-bones as possible. These are perfect for open source projects and organizations that dont need support and guarantees. Or, to just give this approach a try before committing to the commercial Chainguard Images.

Chainguard Images are built using its open source projects apko and melange. These tools leverage the Android Package (apk) ecosystem to provide declarative, reproducible builds with a full Software Bill of Materials (SBOM). The images also support the industry-standard, Open Source Vulnerability (OSV) schema for vulnerability information.

People have tried to offer clean images before, but its hard to do. To accomplish this feat, Chainguard uses its own first product, Chainguard Enforce. In particular, Enforces Evidence Lake provides a real-time asset inventory of containerized programs components. Evidence Lake, in turn, is based on the open-source Sigstore project. It secures software supply chains by creating digital signatures for the programs elements.

On top of this, Chainguard has built what they call Painless Vulnerability Management.

This is a manually curated vulnerability feed. The company then puts its money where its mouth is. Chainguard offers Service Level Agreements (SLA)s for its images. They guarantee to provide patches or mitigations for new vulnerabilities. You dont have to constantly monitor security disclosures. Chainguard does it for their Images so you dont have to.

All Chainguard images come signed. They also include a signed SBOM. Signatures and provenance can be traced and verified with Sigstore. These signatures and signing information are kept in a public Rekor transparency log.

The company is also providing Federal Information Processing Standards (FIPS) compliant variants of its images for government organizations. FIPS validation is coming soon.

The images are also designed to achieve high Supply-chain Levels for Software Artifacts (SLSA) ratings. As part of this, the Chainguard Images are meant for full reproducibility. That is, Chainguard explained, any given image can be bitwise recreated from the source.

At least one customer is already sold on Chainguards new offering. Tim Pletcher, an HPE Research Engineer at the Office of the Security CTO, said, We are excited about the prospect of an actively curated base container image distro that has the potential to allow HPE to further enhance software supply chain integrity for our customers.

Finally to make all this happen and keep it going into the future Chainguard has also raised a $50 million Series A financing round. This is being led by Sequoia Capital and numerous other venture capitalists and angel investors. In other words, both technically and financially, Chainguard Images are set to make a major difference in securing the cloud native computing world.

Featured image by IO-ImagesfromPixabay

See the article here:

Chainguard Secure Software Supply Chain Images Arrive The New Stack - thenewstack.io

The 15 Best AI Tools To Know – Built In

Once an idea only existing in sci-fi, artificial intelligence now plays a role in our daily lives. In fact, we expect it from our tech products. No one wants to reconfigure their entire tech suite every time a new update is launched. We need technology that can process code for us, solve problems independently, and learn from past mistakes so we have free time to focus on the big picture issues.

Thats where AI comes in. It makes projects run smoother, data cleaner, and our lives easier. Around 37 percent of companies use AI to run their businesses, according to the tech research firm Gartner. That number should only grow in coming years, considering the number of companies using artificial intelligence jumped 270 percent from 2015 to 2019.

AI is already a staple of the business world and helps thousands of companies compete in todays evolving tech landscape. If your company hasnt already adopted artificial intelligence, here the top 15 tools you can choose from.

Specialty: Cybersecurity

Companies that conduct any aspect of their business online need to evaluate their cybersecurity. Symantec Endpoint Protection is one tool that secures digital assets with machine learning technology. As the program encounters different security threats, it can independently learn over time how to distinguish between good and malicious files. This alleviates the human responsibility of configuring software and running updates, because the platforms AI interface can automatically download new updates and learn from each security threat to better combat malware, according to Symantecs website.

Specialty: Recruiting

Rather than siloing recruiting, background checks, resume screening and interview assessments, Outmatch aims to centralize all recruiting steps in one end-to-end, AI-enabled platform. The companys AI-powered hiring workflow helps recruiting teams streamline their operations and cut back on spending by up to 40 percent, according to Outmatchs website. With Outmatchs tools, users can automate reference checks, interview scheduling, and candidate behavioral and cognitive screening.

Specialty: Business intelligence

Tableau is a data visualization software platform with which companies can make industry forecasts and form business strategies. Tableaus AI and augmented analytics features help users get access to data insights more quickly than they would through manual methods, according to the companys site. Some names among Tableaus client base include Verizon, Lenovo, Hello Fresh and REI Co-op.

Specialty: Business intelligence

Salesforce is a cloud-enabled, machine learning integrated software platform that companies can use to manage their customer service, sales and product development operations. The companys AI platform, called Einstein AI, acts as a smart assistant that can offer recommendations and automate repetitive data input to help employees make more data informed decisions, according to the platforms site. Scalable for companies ranging in size from startups to major corporations, Salesforce also offers a variety of apps that can be integrated into their platform so companies can customize their interface to meet their specific needs.

Specialty: Business intelligence

H2O.ai is a machine learning platform that helps companies approach business challenges with the help of real-time data insights. From fraud detection to predictive customer support, H2O.ais tools can handle a broad range of business operations and free up employee time to focus efforts on greater company strategies. Traditionally long term projects can be accomplished by the companys driverless AI in hours or minutes, according to H2Os site.

Specialty: Software development

Specifically designed for developers and engineers, Oracle AI uses machine learning principles to analyze customer feedback and create accurate predictive models based on extracted data. Oracles platform can automatically pull data from open source frameworks so that developers dont need to create applications or software from scratch, said the companys site. Its platform also offers chatbot tools that evaluates customer needs and connects them with appropriate resources or support.

Specialty: Coding

Caffe is an open source machine learning framework with which developers and coders can define, design and deploy their software products. Developed by Berkeley AI Research, Caffe is used by researchers, startups and corporations to launch digital projects, and can be integrated with Python to finetune code models, test projects and automatically solve bug issues, according to Caffes site.

Specialty: Business Intelligence

SAS is an AI data management program that relies on open source and cloud-enablement technologies to help companies direct their progress and growth. SASs platform can handle an array of business functions including customer intelligence, risk assessment, identity verification and business forecasting to help companies better control their direction, according to the companys site.

Specialty: Code development

Specifically designed for integration with Python, Theano is an AI powered library that developers can use to develop, optimize and successfully launch code projects. Because its built with machine learning capabilities, Theano can independently diagnose and solve bugs or system malfunctions with minimal external support, according to the products site.

Specialty: Software development

OpenNN is an open source software library that uses neural network technology to more quickly and accurately interpret data. A more advanced AI tool, OpenNNs advantage is being able to analyze and load massive data sets and train models faster than its competitors, according to its website.

Specialty: Software development

Another open source platform, TensorFlow is specifically designed to help companies build machine learning projects and neural networks. TensorFlow is capable of Javascript integration and can help developers easily build and train machine learning models to fit their companys specific business needs. Some of the companies that rely on its services are Airbnb, Google, Intel and Twitter, according to TensorFlows site.

Specialty: Business intelligence

Tellius is a business intelligence platform that relies on AI technologies to help companies get a better grasp and understanding of their strategies, successes and growth areas. Telliuss platform offers an intelligent search function that can organize data and make it easy for employees to understand, helping them visualize and understand the factors driving their business outcomes. According to Telliuss site, users can ask questions within the platform to discover through lines in their data, sort hefty data and gather actionable insights.

Specialty: Sales

Gong.io is an AI driven sales platform that companies can use to analyze customer interactions, forecast future deals and visualize sales pipelines. Gong.ios biggest asset is its transparency, which gives everyone from employees to leaders insight into team performance, direction changes and upcoming projects. It automatically transforms individual pieces of customer feedback into overall trends that companies can use to discover weak points and pivot their strategies as needed, according to Gong.ios site.

Specialty: Business intelligence

Zia, a product offering from business software company Zoho, is an cloud-integrated AI platform built to help companies gather organizational knowledge and turn customer feedback into strategy. Zias AI tools can analyze customer sales patterns, client schedules and workflow patterns to help employees on every team increase their productivity and success rates, said the companys site.

Specialty: Scheduling

TimeHero is an AI-enabled time management platform that helps users manage their project calendars, to-do lists and schedules as needed. The platforms machine learning capabilities can automatically remind employees when meetings take place, when to send emails and when certain projects are due, according to TimeHeros site. Individual TimeHero users can sync their personal calendars with those of their team so that they can collaborate more efficiently on projects and work around each others due dates.

Read this article:

The 15 Best AI Tools To Know - Built In

Software designed to handle any compression task in any application – Electropages

09-06-2022 | Segger | Design & Manufacture

encompass-PRO is a new all-in-one compression software from SEGGER and includes all industry-standard compression algorithms. The software is created to handle any compression task in any application, fulfilling requirements such as low memory usage, high speed, and on-the-fly processing.

It contains well-defined, highly efficient compression algorithms, including DEFLATE, LZMA and LZJU90, offering full interoperability with third-party and open-source tools and libraries. The software also comes with example code illustrating how to access standard archive formats such as Zip.

Being provided in source code form, it is ideal for usage in any embedded firmware and host applications.

"emCompress-PRO is the ultimate compression package," says Ivo Geilenbruegge, managing director at SEGGER. "It offers all the compression and decompression capabilities you'll ever need for any kind of system. One package fits all."

The software also comes with licenses for the more specialised members of the company's compression family: emCompress-ToGo with SMASH-2, designed to run on the smallest of microcontrollers, emCompress-Flex with LZMA for applications demanding high compression, and emCompress-Embed with multiple compression algorithms, optimised for compressing embedded data such as FPGA images.

To evaluate the software, a trial package is available for download. It incorporates tools to test and compare the algorithms' compression and decompression.

Follow this link:

Software designed to handle any compression task in any application - Electropages