frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

The Peaceful Transfer of Power in Open Source Projects

https://shkspr.mobi/blog/2025/11/the-peaceful-transfer-of-power-in-open-source-projects/
72•edent•2h ago

Comments

JimDabell•1h ago
A long-standing succession plan also reduces the likelihood of a supply-chain attack. A fed-up maintainer deciding to quit is the worst possible time to pick a successor.
lapcat•55m ago
I'm not sure there's much utility in this article. It feels like the point was mainly to dunk on Ruby on Rails and WordPress without mentioning them by name. And such dunking may be justified, but it's not particularly interesting and won't lead to an enlightening discussion.

I think it's crucial to point out, though, that Eugen Rochko's motives for stepping down were explicitly personal. He's still quite young, Mastodon itself is still quite young, less than a decade old, and Rochko could have continued in his position for some time. He stepped down because he wanted to step down, not for some selfless reason like succession planning. And I'm not criticizing Rochko for that; he can live his life the way he chooses and do what makes him happy, avoid what he finds unpleasant. And he's to be commended for the mentioned peaceful transition of power. However, there's no inherent reason why Matt Mullenweg or DHH should step down just because Rochko stepped down; their personal goals are obviously different. And Rochko behaved very differently while he was still leading Mastodon.

The author clearly wants those other leaders to step down because he doesn't like those leaders and how they behave, not because of some abstract idea of succession planning. I don't think the metaphor of a king's death is apt here, because nobody has died or become incapacitated. They've just become overtly contemptible.

bayindirh•47m ago
I don't take the same thing from the article. Yes, it's lighter than Terence's standard writing, and a bit more closed than his usual style, but I feel that he just wanted to underline something he liked personally.

In once sentence, the blog post reads:

    Hey, look, this guy did something nice, and was honest about it.
That's all.
lapcat•35m ago
I wouldn't even call it "nice." Stepping down only 9 years after the introduction of Mastodon seems a bit premature. I wouldn't call it selfish, though some people might. Plus, Rochko did get paid 1 million euros in the transition.

For all I know, Rails and WordPress already have succession plans, or if not, I'm sure they will eventually, as the founders get older. They're still relatively young.

alphazard•53m ago
Comparing software projects to governments usually produces the wrong intuition. The stakes are much lower, and risk tolerance should be much higher with a software project. Dictators are good, forks are good, even conflict can be good because it means people care. On the contrary, democracy leads to mediocre decisions, designs by committee, and sluggishness.

Unlike with a government, you can easily walk a way from a software project or create a fork. There is almost zero friction to "voting with your feet" in software and it works.

antonvs•43m ago
> Unlike with a government, you can easily walk away

Part of me hopes for a Snow Crash future where if you don't like the services provided by The American Mafia (a bit of on-the-nose prophecy from Neal Stephenson), you can switch to Mr. Lee's Greater Hong Kong instead. Sadly, human rights would likely be a casualty in that overall scenario.

purple_turtle•41m ago
Open source software project captured by evil people in the worst case results in a lot of confusion and annoyance.

Countries captured by evil people in the worst cases that result in millions of dead people.

Entirely different risks are acceptable.

bArray•50m ago
> Which is why I am delighted that the Mastodon project has shown a better way to behave.

I think we should hold our breath for a moment. The wars waged over concession don't always happen immediately, and not always involving the expected parties [1].

> Today, we’re marking another momentous step in this ongoing process as our Founder and now former CEO Eugen Rochko begins his transition into a new role with Mastodon. We are thrilled that he will continue on in an advisory role with our team.

The problem with the undead King is if they ever feel the need to exercise any form of power.

[1] https://en.wikipedia.org/wiki/Battle_of_Hastings

smashah•49m ago
There should be P.E Firms run by OSS devs concentrating in being the succession and exit plan for OSS founders while charging big tech cos ($1bn+) for support.

Might sound a bit evil at first but it is the way to bolster the whole xkcd issue.

embedding-shape•46m ago
Or we could shame companies into action by refusing to use and pay to companies who use FOSS (all of them) but don't contribute back (most of them). Lastly, don't contribute to their FOSS projects, regardless of how nice they might look, if they're not contributing to the ecosystem overall.
jamesbelchamber•42m ago
And start putting flowers up our noses while we're at it!
szszrk•47m ago
I struggle to find out who is this aimed at, really.

It's clear there is a lot of drama in Opensource projects lately, but there are countless projects where the maintainer would be thrilled to have one or two people that would actually want to invest their time into reviewing some code with him. Day they find others pumped by their work and willing to invest some time would be celebrated with cake each year.

Just because someone else's broken CI pipeline does "Several thousands of downloads of NPM package per day" should not make you feel bad that you have not "Build an organisation which won't crumble" yet.

That's backwards. You want to help those people? Create that organization. Create another Apache org and take over important projects that need that.

It really feels like banging the wrong drum. Just another person having a broken curl setup and blaming Daniel Stenberg for it.

gassi•40m ago
I run a semi-popular open source project (https://romm.app/), and this is a topic we tend to revisit regularly. While there will always have to be someone at the top who owns the project, we've tried to organize ourselves in a way that should prevent a complete hostile takeover:

  * Gihub organization is co-owned (2 Owners)
  * I own the domain, they run the Discord server
  * Finances are handled by https://opencollective.com/
  * All code is GPL or AGPL licensed
  * Name and branding are owned by The Project itself, or CC-BY
In the event either (or both) of us step away, temporarily or permanently, the core team is has the power and permissions to continue running the project indefinitely. While I would be able to remove them as co-owner on Github in a takeover scenario, I won't have access to the finances or the Discord community.
graemep•33m ago
> Name and branding are owned by The Project itself

That is only meaningful if the project is a legal entity that can sue, otherwise it means "no one owns it" - which is fine if that is what you want.

bodhi_mind•37m ago
The whole “why I contribute to open source” has been on my mind lately after I published my first open source project and it’s gotten moderate attention from the data engineering community (200 GitHub stars):

TinyETL - Fast, zero-config ETL in a single binary https://github.com/alrpal/TinyETL

The transition from being the sole architect of “my” project into more of a maintainer, organizer, director, has been a unique experience and interesting to reflect on.

What’s the future hold? I really don’t know.

hobs•17m ago
Wow, really impressive, there's a lot of stuff going on in such a small package, great work!
muragekibicho•35m ago
'or if reading is too woke' Amazing piece and oddly relatable
purple_turtle•35m ago
> I'm begging project leaders everywhere - please read up on the social contract and the consent of the governed.

I do not need consent as I am not governing anyone like king or president governs.

If someone is using my project they are also not really entitled to anything, beyond what stated in license and similar documents if any.

If they dislike it, they can fork my project and go away.

If someone wants to be entitled to anything, they are free to make a contract and pay for service they desire. But while many are happy to demand nearly noone is willing to help. Or even fork project. Instead they make entitled demand and treat open source developers as servants or slaves or their pets.

No, you are not entitled to your preferred governance model to be used in my software project.

edent•31m ago
I think you've read something into my post that I didn't intend.

I'm specifically talking about the community of people who do contribute. If you look at the recent shenanigans of WordPress and Ruby, they are causing discontent within the existing organisation of contributors.

Those contributors are, of course, free to fork off if they want. But if you're trying to build a long-term viable project, then you need a way to ensure that the people working with you are treated fairly.

purple_turtle•25m ago
Post explicitly makes request to all project leaders: "I'm begging project leaders everywhere".

As one of them I want to state that others, including you, are not entitled to decide how I run my project. I want to express that I am thankful that this one is phrased as suggestion.

But I utterly reject that open source project is substantially similar to governing a country in responsibility and preferred setup.

So I reject your analogy and suggestions as highly flawed.

peauc•24m ago
What kind of issues are you referencing with Ruby ? I have followed the Wordpress drama.
edent•22m ago
See, for example, https://joel.drapper.me/p/rubygems-takeover/
lapcat•20m ago
> If you look at the recent shenanigans of WordPress and Ruby, they are causing discontent within the existing organisation of contributors.

This is why I think the article is a bit of misdirection. Your criticism is about project governance not about project succession.

You want the leaders of WordPress and Rails to step down now because you don't like how they behave in power, not because of the danger that the leaders might die or disappear and leave a power vacuum. I feel that the Mastodon example is a red herring here.

edent•13m ago
Governance and succession are intimately tied. I feel that part of the problem with WordPress and Rails is that that there is no model for replacing poor governance.
lapcat•6m ago
> I feel that part of the problem with WordPress and Rails is that that there is no model for replacing poor governance.

But Eugen Rochko was not replaced. He voluntarily stepped down from power because he was personally dissatisfied in the leadership role. Nobody was calling for his ouster. He could have continued as leader of Mastodon for many more years with nobody batting an eyelash. So again, Mastodon is a red herring.

hiddencost•18m ago
You seem like the kind of person who would fail badly with an open source project that requires meaningful community relationships.
purple_turtle•13m ago
And this is fine! Dying or failed open source project due to bad leader will not result in nightmares caused by unsuitable kings, fuhrers, presidents, supreme leaders and first secretaries.
zwnow•4m ago
Meaningful community relationships are good faith relationships. The community is not entitled to anything unless willing to compensate the amount of work a new _thing_ requires. If something is open source, they are also capable of creating PRs themselves if they are missing anything. There's nothing wrong with asking for features, demanding them is where the relationship goes bad.

Hell, even maintaining the project shouldn't be demanded without compensation.

theoldgreybeard•31m ago
Why would I care when I am dead. It's just software and "bloody civil wars" is not something that happens over software governance. Oh no, some people might say mean things to eachother and someone might fork the software. Big Deal. Figure it out for yourselves like adults. Remember, the license says AS-IS and NO WARRANTY. Use at your own risk. I don't owe you anything. If you want work done on it - do it yourself or pay me.
1970-01-01•27m ago
Linux will be the ultimate test for this. Linus will eventually retire or die. The individual that takes it from there sets the future for all open source. I cannot imagine open source existing if the kernel maintenance is squandered.
ziml77•24m ago
Sorry for commenting about the page itself, but did anyone else have to go into reader mode to read it? The page is bouncing up and down, the text is extremely blurry and varying in size letter by letter, and every element seems randomly slanted.
edent•11m ago
I think you might have accidentally activated the page's "Drunk CSS" mode - https://shkspr.mobi/blog/2025/09/drunk-css/

Click one of the theme buttons at the top to restore normality.

ziml77•4m ago
[delayed]
asim•23m ago
I have tried to hand off a project for years with many failed attempts. In the case of Mastodon they have some very high profile names that effectively want to relive the glory days of Twitter and take it over. In the case of smaller projects, you have to very diligent when deciding who to hand off too. I don't think there are great answers here.

If anyone is interested https://go-micro.dev

ferguess_k•6m ago
I think it depends on what kind of OSP they are.

For example, Linux kernel is definitely widely used and I'd argue that it is one of the few things that have achieved globally acknowledgement and usage, i.e. a "human" thing, as the aliens said. Such a project would naturally require some strong leader (Linus is famous for being straightforward and none-BS) and a bunch of able enforcers (maintainers). I don't think we are short of able enforcers, although the total number of Linux maintainers who understand the full picture may be small, but we don't need a lot of them anyway. The key is to elect an equally good and strong leader, without which the project may degrade slowly, like all human projects. I'd hope someone with both the technical knowledge as well a strong character to take over whence Linus retires -- but Linus is only 55 years old so I believe he and the community still have many years to search for the next leader.

The Peaceful Transfer of Power in Open Source Projects

https://shkspr.mobi/blog/2025/11/the-peaceful-transfer-of-power-in-open-source-projects/
73•edent•2h ago•35 comments

Your Smartphone, Their Rules: App Stores Enable Corporate-Government Censorship

https://www.aclu.org/news/free-speech/app-store-oligopoly
169•pabs3•2h ago•84 comments

The $1k AWS Mistake

https://www.geocod.io/code-and-coordinates/2025-11-18-the-1000-aws-mistake/
119•thecodemonkey•5h ago•128 comments

Multimodal Diffusion Language Models for Thinking-Aware Editing and Generation

https://github.com/tyfeld/MMaDA-Parallel
86•lnyan•6h ago•6 comments

Gemini 3

https://blog.google/products/gemini/gemini-3/
1556•preek•1d ago•974 comments

I made a down detector for down detector

https://downdetectorsdowndetector.com
358•gusowen•15h ago•116 comments

The Future of Programming (2013) [video]

https://www.youtube.com/watch?v=8pTEmbeENF4
77•jackdoe•6d ago•46 comments

Proxmox Virtual Environment 9.1 available

https://www.proxmox.com/en/about/company-details/press-releases/proxmox-virtual-environment-9-1
33•speckx•55m ago•15 comments

Gymkhana's 1978 Subaru Brat with 9,500-RPM Redline, Active Aero Is One Super Ute

https://www.thedrive.com/news/gymkhanas-1978-subaru-brat-with-9500-rpm-redline-and-active-aero-is...
18•PaulHoule•1w ago•15 comments

Google Antigravity

https://antigravity.google/
973•Fysi•23h ago•955 comments

I just want working RCS messaging

https://wt.gd/i-just-want-my-rcs-messaging-to-work
182•joecool1029•13h ago•176 comments

Pimped Amiga 500

https://www.pimyretro.org/pimped-amiga-500/
62•onename•3h ago•26 comments

Pebble, Rebble, and a path forward

https://ericmigi.com/blog/pebble-rebble-and-a-path-forward/
436•phoronixrly•22h ago•224 comments

Ultima VII Revisited

https://github.com/ViridianGames/U7Revisited
165•erickhill•1w ago•45 comments

Show HN: Browser-based interactive 3D Three-Body problem simulator

https://trisolarchaos.com/?pr=O_8(0.6)&n=3&s=5.0&so=0.00&im=rk4&dt=1.00e-4&rt=1.0e-6&at=1.0e-8&bs...
181•jgchaos•1d ago•65 comments

Programming the Commodore 64 with .NET

https://retroc64.github.io/
6•mariuz•5d ago•0 comments

Itiner-e: A high-resolution dataset of roads of the Roman Empire

https://www.nature.com/articles/s41597-025-06140-z
17•benbreen•1w ago•3 comments

Learning to Boot from PXE

https://blog.imraniqbal.org/learning-to-boot-from-pxe/
12•speckx•4h ago•6 comments

How do the pros get someone to leave a cult?

https://www.theguardian.com/science/2025/nov/19/how-to-leave-a-cult-experts-intervention
81•n1b0m•2h ago•47 comments

What Killed Perl?

https://entropicthoughts.com/what-killed-perl
16•speckx•5h ago•23 comments

I wrote a Pong game in a 512-byte boot sector

https://akshatjoshi.com/i-wrote-a-pong-game-in-a-512-byte-boot-sector/
74•akshat666•4d ago•12 comments

Blender 5.0

https://www.blender.org/download/releases/5-0/
902•FrostKiwi•17h ago•287 comments

Cloudflare outage on November 18, 2025 post mortem

https://blog.cloudflare.com/18-november-2025-outage/
1311•eastdakota•15h ago•765 comments

How to Stay Sane in a World That Rewards Insanity

https://www.joanwestenberg.com/p/how-to-stay-sane-in-a-world-that-rewards-insanity
25•enbywithunix•50m ago•6 comments

Mojo-V: Secret Computation for RISC-V

https://github.com/toddmaustin/mojo-v
48•fork-bomber•1w ago•14 comments

Gemini 3 Pro Model Card [pdf]

https://storage.googleapis.com/deepmind-media/Model-Cards/Gemini-3-Pro-Model-Card.pdf
250•virgildotcodes•1d ago•324 comments

Cloudflare Global Network experiencing issues

https://www.cloudflarestatus.com/incidents/8gmgl950y3h7
2392•imdsm•1d ago•1619 comments

The code and open-source tools I used to produce a science fiction anthology

https://compellingsciencefiction.com/posts/the-code-and-open-source-tools-i-used-to-produce-a-sci...
175•mojoe•23h ago•27 comments

Strace-macOS: A clone of the strace command for macOS

https://github.com/Mic92/strace-macos
80•signa11•14h ago•18 comments

Bluetooth Channel Sounding: The Next Leap in Bluetooth Innovation

https://www.embedded.com/bluetooth-channel-sounding-the-next-leap-in-bluetooth-innovation?_gl=1*8...
61•JoachimS•6d ago•32 comments