Python’s PyPI Will Sell ‘Organization Accounts’ to Corporate Projects to Fund Staff

Last year Python’s massive PyPI repository of pre-written software packages had 235.7 billion downloads — a 57% annual growth in its download counts and bandwidth. So now Python’s nonprofit Python Software Foundation has an announcement.
Their director of infrastructure said today that they’re rolling out “the first step in our plan to build financial support and long-term sustainability of PyPI, while simultaneously giving our users one of our most requested features: organization accounts.”

Organizations on PyPI are self-managed teams, with their own exclusive branded web addresses. Our goal is to make PyPI easier to use for large community projects, organizations, or companies who manage multiple sub-teams and multiple packages.

We’re making organizations available to community projects for free, forever, and to corporate projects for a small fee. Additional priority support agreements will be available to all paid subscribers, and all revenue will go right back into PyPI to continue building better support and infrastructure for all our users… Having more people using and contributing to Python every year is an fantastic problem to have, but it is one we must increase organizational capacity to accommodate. Increased revenue for PyPI allows it to become a staffed platform that can respond to support requests and attend to issues in a timeframe that is significantly faster than what our excellent (but thinly spread) largely volunteer team could reasonably handle.

We want to be very clear — these new features are completely optional. If features for larger projects don’t sound like something that would be useful to you as a PyPI maintainer, then there is no obligation to create an organization and absolutely nothing about your PyPI experience will change for you.

We look forward to discussing what other features PyPI users would like to see tackled next…

Read more of this story at Slashdot.

Godot Arrives In the Epic Games Store

The open-source, cross-platform Godot Engine has arrived in the Epic Games store. “Starting today, you can choose to use EGS to download the engine and keep it up to date with every release,” writes the company in a blog post. From the release: Epic Games is a long-time supporter of Godot, and thanks to their contributions we have been able to improve our rendering pipeline as well as our built-in scripting language, GDScript — the fruits of that work are now visible in the newly released Godot 4.0!

The Godot build you can download from EGS is the exact same open source release as on other platforms. Being present on more storefronts opens a new convenient avenue for more users to find the engine and begin their game development journey. You can of course still download Godot Engine from other platforms, or clone its source code from the Git repository and build it yourself. And if you do, you are more than welcome to contribute to Godot’s development too!

Read more of this story at Slashdot.

DreamWorks’ OpenMoonRay Renderer Code Published

At Least One Open Source Vulnerability Found In 84% of Code Bases, Report Finds

L.Kynes shares a report from CSO Online: At a time when almost all software contains open source code, at least one known open source vulnerability was detected in 84% of all commercial and proprietary code bases examined by researchers at application security company Synopsys. In addition, 48% of all code bases analyzed by Synopsys researchers contained high-risk vulnerabilities, which are those that have been actively exploited, already have documented proof-of-concept exploits, or are classified as remote code execution vulnerabilities. The vulnerability data — along with information on open source license compliance — was included in Synopsys’ 2023 Open Source Security and Risk Analysis (OSSRA) report (PDF), put together by the company’s Cybersecurity Research Center (CyRC). “Of the 1,703 codebases that Synopsys audited in 2022, 96% of them contained open source,” adds L.Kynes, citing the report. “Aerospace, aviation, automotive, transportation, logistics; EdTech; and Internet of Things are three of the 17 industry sectors included in the report that had open source in 100% of their audited codebases. In the remaining verticals, over 92% of the codebases contained open source.”

Read more of this story at Slashdot.

Hobbyist’s Experiment Creates a Self-Soldering Circuit Board

Long-time Slashdot reader wonkavader found a video on YouTube where, at the 2:50 mark, there’s time-lapse footage of soldering paste magically melting into place. The secret?
Many circuit boards include a grounded plane as a layer. This doesn’t have to be a big unbroken expanse of copper — it can be a long snake to reduce the copper used. Well, if you run 9 volts through that long snake, it acts as a resistor and heats up the board enough to melt solder paste. Electronics engineer Carl Bugeja has made a board which controls the 9 volt input to keep the temperature on the desired curve for the solder.

This is an interesting home-brew project which seems like it might someday make a pleasant, expected feature in kits.

Hackaday is impressed by the possibilities too:
Surface mount components have been a game changer for the electronics hobbyist, but doing reflow soldering right requires some way to evenly heat the board. You might need to buy a commercial reflow oven — you can cobble one together from an old toaster oven, after all — but you still need something, because it’s not like a PCB is going to solder itself. Right?

Wrong. At least if you’re Carl Bugeja, who came up with a clever way to make his PCBs self-soldering…. The quality of the soldering seems very similar to what you’d see from a reflow oven…. After soldering, the now-useless heating element is converted into a ground plane for the circuit by breaking off the terminals and soldering on a couple of zero ohm resistors to short the coil to ground.

It’s an open source project, with all files available on GitHub. “This is really clever,” tweeted Adrian Bowyer, inventor of the open source 3D printer the RepRap Project.

In the video Bugeja compares reflow soldering to pizza-making. (If the circuit board is the underlying dough, then the electronics on top are the toppings, with the solder paste representing the sauce that keeps them in place. “The oven’s heat is what bonds these individual items together.”)

But by that logic making a self-soldering circuit is “like putting the oven in the dough and making it edible.”

Read more of this story at Slashdot.

As GitHub Retires ‘Atom’, Open Source ‘Pulsar’ Continues Its Legacy

In June GitHub announced they’d retire their customizable text editor Atom on December 15th — so they could focus their development efforts on the IDEs Microsoft Visual Studio Code and GitHub Codespaces. “As new cloud-based tools have emerged and evolved over the years, Atom community involvement has declined significantly,” according to a post on GitHub’s blog.

So while “GitHub and our community have benefited tremendously from those who have filed issues, created extensions, fixed bugs, and built new features on Atom,” this now means that:

– Atom package management will stop working
– No more security updates
– Teletype will no longer work
– Deprecated redirects that supported downloading Electron symbols and headers will no longer work
– Pre-built Atom binaries can continue to downloaded from the atom repository releases

Fortunately, in 2014 GitHub open sourced the code for Atom. And according to It’s FOSS News:

A community build for it is already available; however, there seems to be a new version (Pulsar) that aims to bring feature parity with the original Atom and introduce modern features and updated architecture….

The reason why they made a separate fork is because of different goals for the projects. Pulsar wants to modernize everything to present a successor to Atom. Of course, the user interface is much of the same. Considering Pulsar hasn’t had a stable release yet, the branding could sometimes seem all over the place. However, the essentials seem to be there with the documentation, packages, and features like the ability to install packages from Git repositories….

As of now, it is too soon to say if Pulsar will become something better than what the Atom community version offers. However, it is something that we can keep an eye on…. You can head to its official download page to get the package required for your system and test it out.

Like Atom, Pulsar is cross-platform support (supporting Linux, macOS, and Windows).

Read more of this story at Slashdot.

Amazon Joins Open Invention Network

Amazon and Amazon Web Services (AWS) have joined the Open Invention Network (OIN) — the world’s largest patent non-aggression consortium. ZDNet reports: OIN has long protected Linux and Linux-related software from patent aggression by rival companies. With the recent increase in patent troll attacks, the OIN is also defending companies from these assaults. This is a natural move for Amazon. Besides relying on Linux and open-source software both for its retail and cloud businesses, Amazon has a strict policy against patent infringement, and users who engage in this behavior can have their listings removed or accounts deleted. Nevertheless, like all large companies, Amazon has also been sued for patent violations. Joining the OIN simply makes good business sense. Nithya Ruff, the Amazon Open Source Program Office director, added: “Linux and open source are essential to many of our customers and a key driver of innovation across Amazon. We are proud to support a broad range of open-source projects, foundations, and partners, and we are committed to the long-term success and sustainability of open source as a whole. By joining OIN, we are continuing to strengthen open source communities and helping to ensure technologies like Linux remain thriving and accessible to everyone.”

Read more of this story at Slashdot.

New Hampshire Set To Pilot Voting Machines That Use Open-Source Software

According to The Record, New Hampshire will pilot a new kind of voting machine that will use open-source software to tally the votes. The Record reports: The software that runs voting machines is typically distributed in a kind of black box — like a car with its hood sealed shut. Because the election industry in the U.S. is dominated by three companies — Dominion, Election Systems & Software and Hart InterCivic — the software that runs their machines is private. The companies consider it their intellectual property and that has given rise to a roster of unfounded conspiracy theories about elections and their fairness. New Hampshire’s experiment with open-source software is meant to address exactly that. The software by its very design allows you to pop the hood, modify the code, make suggestions for how to make it better, and work with other people to make it run more smoothly. The thinking is, if voting machines run on software anyone can audit and run, it is less likely to give rise to allegations of vote rigging.

The effort to make voting machines more transparent is the work of a group called VotingWorks. […] On November 8, VotingWorks machines will be used in a real election in real time. New Hampshire is the second state to use the open-source machines after Mississippi first did so in 2019. Some 3,000 voters will run their paper ballots through the new machines, and then, to ensure nothing went awry, those same votes will be hand counted in a public session in Concord, N.H. Anyone who cares to will be able to see if the new machines recorded the votes correctly. The idea is to make clear there is nothing to hide. If someone is worried that a voting machine is programmed to flip a vote to their opponent, they can simply hire a computer expert to examine it and see, in real time.

Read more of this story at Slashdot.

The Godot Game Engine Now Has Its Own Foundation

The Godot Engine now has its own foundation to continue funding themselves. Previously, they teamed up with the Software Freedom Conservancy to handle fiscal sponsorship duties. Phoronix reports: The Godot engine developers and Software Freedom Conservancy mutually agreed to move the open-source game engine project to its own foundation. The Godot Foundation has been setup in the Netherlands as its own organization modeled after the policies of the SFC. The Godot Foundation is to help this game engine achieve its next level of growth and project a stronger image for the project. “We have just started the process of moving to the Foundation,” writes Godot Engine lead developer, Juan Linietsky, in a blog post. “For now all of Godot’s funding and contractors are still managed by the SFC. The SFC will gradually reduce its work for Godot and the new foundation will slowly ramp up. Stay tuned for announcements in the future as we finalize the Foundation’s organizational structure and officially begin operations.”

More details can be found via the Godot Engine blog.

Read more of this story at Slashdot.

Fintech Giant ‘The Clearing House’ Joins Open-Source Patent Protection Powerhouse OIN

The Clearing House, a banking association and payments company owned by the largest commercial banks in the U.S., has joined the Open Invention Network (OIN) — the world’s largest patent nonaggression consortium. ZDNet reports: The OIN has long protected Linux and Linux-related software from patent aggression by rival companies. With the increase in patent troll attacks, the OIN is also defending companies from these assaults. You may not think financial companies and banks are subject to such attacks. I mean, TCH’s roots go all the way back to 1853. Think again.

As Keith Bergelt, CEO of OIN, said in June, “The most sophisticated and compelling global banking and fintech companies have essentially become technology companies that employ open-source software to deliver their services at scale.” Further, patent trolls “appear to be targeting them for this reason, along with the fact that financial services companies have not historically been active patent filers.” That’s because, historically, they’ve purchased most of their tech from third-party vendors.

That was then. This is now. Today, financial institutions generate more tech in-house, so they’re more concerned about being granted patents, building patent portfolios, and related patent issues. Indeed, these days fintech businesses have their own Fintech Open Source Foundation (FINOS), the financial sector branch of the Linux Foundation. So, Bergelt said in a release Wednesday, “Advancements in financial services and fintech increasingly rely on open-source technologies. As the most experienced payment company in the US, and a keystone for the financial services industry, we are pleased that The Clearing House is committed to patent nonaggression in core Linux and adjacent open-source technologies.”

Read more of this story at Slashdot.