frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

The federated code forge

https://tangled.org/blog/forge/
48•zlliang•1h ago

Comments

gnabgib•1h ago
Tangled, a Git collaboration platform built on atproto (332 points, 2025, 86 comments) https://news.ycombinator.com/item?id=45543899
icy•59m ago
Hi! Tangled co-founder here. We're super stoked with this launch -- we've stabilized our AT Protocol lexicons, completely overhauled our architecture and UI, and made self-hosting the entire stack (or parts of it!) incredibly easy. We've also shipped support for organizations, and have private repos rolling out in the following couple weeks.

Happy to answer any questions at all.

kstrauser•53m ago
I’m excited about this direction. I’ve moved most of my own projects onto my own Forgejo, but miss it being easy for remote strangers to open PRs and such without registering in my system, which I have zero desire to allow.

So what’s the state of Tangled today? Say I have a Tangled server (instance? host?) up and running with my repos. Some stranger wants to contribute. What do they have to do before they can open issues or send PRs or whatever?

nerdypepper•49m ago
all they would need is an atproto account. you can get one of these on Tangled itself, or bring your own. they can then open issues on your repository.

soon, repos will be able to declare a contribution policy: presently its open to all (anybody can open an issue), but owners can choose to limit this to just contributors for example.

kstrauser•34m ago
How soon will that be, do you suppose? It's not a blocker for most of my projects, but I can think of a few that I'd like to keep more closed (while still making them publicly cloneable). That doesn't keep me from using Tangled today for the open repos. It just means I'd need to have at least a couple of sharing setups - Tangled plus Forgejo - going at the same time for a while.

Also, will Tangled support private repos that are only visible or fetchable to specific people? Would that even make sense in its model?

nerdypepper•31m ago
for collaboration policies: its already part of the protocol, just needs to be baked into the flagship client!

private repos are coming very soon, we have a working demo of private repositories.

icy•43m ago
That's exactly the problem we want to solve. Of course, they still need identity of some kind -- in this case, they'll need an AT Protocol account -- either by self-hosting a Personal Data Server[0], or signing up with a provider such as Tangled or Bluesky/Blacksky, etc. This is the last ever account they'll need (and it's theirs, and portable!). They can then begin contributing; they'll use this same account for all of Tangled and other AT Protocol services.

Your Tangled git server that you'd want to run is a 'knot'[1]. It's not exactly analogous to Forgejo because it's headless, but that makes it super light on resources to run.

[0]: https://atproto.com/guides/the-at-stack#pds [1]: https://tangled.org/docs/knots/self-hosting/

HumanOstrich•48m ago
I wanted to try this but when I signed up for a BlueSky account it was immediately banned by some automation. I appealed but never heard back.
nerdypepper•40m ago
don't need to signup for bsky to try out Tangled however, you can directly just signup for an account with Tangled.
mbStavola•42m ago
I honestly love Tangled.

At this point it's really the only forge I want to use going forward, considering that it sits nicely alongside all my other social data with ATProto.

stryan•25m ago
Really looking forward to seeing Tangled develop! I've got a side project that's main repo and CI is on my self-hosted Gitea but code and releases are mirrored to Github; I'm hoping to move it off Gitea and onto Tangled for code/releases/potentially CI and just keep Github for discoverability/backups/namespace "squatting". Just need git-bug to add a Tangled bridge so I can keep issues synced and (ideally) for there to be instructions for running the client self-hosted. It doesn't have to be a full featured client but I also don't want to be SOL for web visibility if the main Tangled appview is down.

One musing: I did run into my first "issue" with federated Git hosting the other day while setting up Neovim on a new machine. One of the plugins I use is hosted on Tangled and I guess its backing Knot was down. This was awkward for two reasons:

1. It as unclear to me from the Tangled website the backing knot was the issue (for a while I thought it was something on my end)

2. I really had no backup plans for something like a Neovim plugin's source forge being down and, clearly, neither did the Neovim package manager as it just kept showing an error on every session I started with no way to fix it :).

I suppose in the long run we really shouldn't be assuming that code storage is just Always There or easily cached somewhere, but I anticipate some growing pains in the mean time. ATProto doesn't seem to have the benefit ActivityPub has where if the instance I wanted to view content on was down I can usually find some other instance that's gotten the messages.

nerdypepper•18m ago
> I really had no backup plans for something like a Neovim plugin's source forge being down

this problem could exist with any package manager, the go package manager is one example, where it allows specifying packages from any git url. we host a mirror of all git repositories on our infra, and serve that when the backing knot is down. you could choose to trust that and pull from there (verifying that the tarball has a known correct hash), the way the go package manager pulls from proxy.golang.org.

icy•15m ago
> I suppose in the long run we really shouldn't be assuming that code storage is just Always There or easily cached somewhere, but I anticipate some growing pains in the mean time.

Pretty much. We want to make running your own git remotes as easy as possible. Lets you scale on your own too.

> ATProto doesn't seem to have the benefit ActivityPub has where if the instance I wanted to view content on was down I can usually find some other instance that's gotten the messages.

It does give you (or anybody) the ability to index this data independently, and not miss messages -- which AP doesn't afford. Different tradeoffs!

huksley•20m ago
Is the private repo support possible when self hosted?
jon-wood•14m ago
Not currently, Tangled's data model is entirely built around Atproto, which at least at the moment assumes everything posted is public. There's work in progress at the moment to layer access controlled data on top of that which I think Tangled could use with time though.
nerdypepper•6m ago
we have already got a working demo of private repositories that works very similarly to atproto spaces alpha, but without requiring spaces to be stabilized, we will have something to show off in the next couple weeks :)
rebolek•5m ago
I would really love to use it but when are you going to support SHA256? I have SHA256 repo and I don’t want to rewrite all history especially when Git 3 is moving to SHA256 anyway.
kstrauser•37m ago
Got it. I'm still trying slightly unsuccessfully to wrap my head around this, but I've run a Mastodon instance for about 10 years and it took me a little while to wrap my head around that, too.

This is great. I'm delighted at the idea of having my own knot hosting my projects, talking to my friend's knot, and coordinating on a global project's knot, all without having to lock everyone into one centralized point of failure (even mine). Amazing. I love it!

AI isn't replacing SREs, it's deskilling them

https://newsletter.signoz.io/p/ai-isnt-replacing-sres-its-deskilling
204•dorianniemiec•1h ago•161 comments

A Working Nintendo in ~1GB of Qwen Weights

https://github.com/dbreunig/nesformer
18•dbreunig•43m ago•21 comments

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

https://phorion.io/blog/offical-claude-code-vsx-compromise/
401•_chall•10h ago•366 comments

Northflank Breached

https://status.northflank.com
99•js4ever•2h ago•66 comments

The federated code forge

https://tangled.org/blog/forge/
54•zlliang•1h ago•19 comments

Azure's Weakest Link – Five Full Cross-Tenant Compromises

https://www.binarysecurity.no/posts/2026/10/one-root-case
189•swq115•7h ago•28 comments

US tech stocks see sharp falls over AI cost fears

https://www.bbc.co.uk/news/articles/cvwy72e0n72yo
63•mindracer•1h ago•22 comments

Blockchain intelligence firms link North Korea to $6.3B hack on Binance

https://www.npr.org/2026/10/30/g-s1-150902/blockchain-intelligence-firms-link-north-korea-to-6-3b...
69•paulpauper•1h ago•14 comments

Binance-hacker-1029 – $5.6B stolen from Binance

https://arkm.com/explorer/entity/21a94755-f604-45e5-9501-6542e23005e8
1695•Tiberium•19h ago•1147 comments

Show HN: Spinf-serve – inference server for bulk scoring and decisions

https://github.com/spinfinc/spinf-serve
3•giarec•20m ago•0 comments

Breaking the open web won't stop the bad bots

https://www.techpolicy.press/breaking-the-open-web-wont-stop-the-bad-bots/
9•raybb•2d ago•0 comments

Florilegium: Procedural Flowers in LaTeX

https://github.com/kevinraymond/florilegium
15•nanna•1h ago•1 comments

Polymarket 1h halt after vendor compromise; affected users will be 'made whole'

https://www.nbcnews.com/business/consumer/polymarket-trading-halt-hack-wallets-rcna606405
52•theanonymousone•2h ago•11 comments

Medicare Will Pay $50k for Your Heart Attack. It Should Pay $100 to Prevent It

https://www.medpagetoday.com/opinion/second-opinions/123553?trw=no
172•brandonb•2h ago•153 comments

Tracks along the longest drive on another world

https://science.nasa.gov/blog/tracks-along-the-longest-drive-on-another-world/
22•shcallaway•16h ago•0 comments

The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes

https://www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/
203•domhudson•4h ago•141 comments

Compile-Time Dependent Types

https://thenumb.at/Syl-Intro/
27•ibobev•4d ago•4 comments

Finding Panics with Call Graph Analyzer

https://tweedegolf.nl/en/blog/242/finding-panics-with-call-graph-analyzer/
55•ndr•2d ago•1 comments

Pell Puzzles Review

https://dles.gg/reviews/pell-puzzles
9•trizoza•2d ago•1 comments

Why a program doesn't work when run from a batch file, but works when clicked

https://devblogs.microsoft.com/oldnewthing/20261026-00/?p=112797/
96•ibobev•3d ago•47 comments

Gilgamesh by Simon Armitage review – an ancient epic is brilliantly translated

https://www.theguardian.com/books/2026/oct/20/gilgamesh-by-simon-armitage-review-an-ancient-epic-...
150•benbreen•2d ago•43 comments

Geist Serif

https://vercel.com/blog/introducing-geist-serif
35•Zm44•1h ago•17 comments

Wasmer (YC S19) Is Hiring OS/Hypervisor Experts in Europe

https://www.workatastartup.com/jobs/98722
1•syrusakbary•10h ago

Show HN: I built a multiplayer game where you're an aerial fighter cat

https://catcopter.com
21•pawelwentpawel•1h ago•7 comments

Herdr has released native app

https://github.com/herdrdev/herdr-app
318•cherioo•16h ago•214 comments

US Reps Lead Democratic Resolution Opposing A.I. Bubble Bailout for Big Tech

https://progressives.house.gov/2026/10/reps-casar-waters-lead-democratic-resolution-opposing-a-i-...
547•DeepLogin•5h ago•379 comments

I'm so bad at billiards that I ended up in the hyperbolic plane [video]

https://www.youtube.com/watch?v=kL9BTbIGxLg
216•surprisetalk•2d ago•36 comments

We ran AI agent swarms in Minecraft and Mindustry

https://labs.ycombinator.com/projects/games/index.html
376•sandslash•19h ago•157 comments

Commodore 1600 VICmodem

https://dfarq.homeip.net/commodore-1600-vicmodem/
37•ibobev•4d ago•15 comments

We're releasing the weights of Mistral Large 4

https://mistral.ai/news/mistral-large-4-oss/
1652•kuberwastaken•1d ago•427 comments