The Changelog: Software Development, Open Source

Jerod and Adam talked with Rich Harris –a JavaScript Journalist on The New York Times Investigations team– about his magical disappearing UI framework called Svelte. We compare and contrast Svelte to React, how the framework is embedded in a component, build time vs. run time, scoping CSS to components, and CSS in JavaScript. Rich also shares where Svelte v3 is heading and the details on Sapper, a framework for building extremely high-performance progressive web apps, powered by Svelte. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:DigitalOcean – The simplest cloud platform for developers and teams Whether you’re running one virtual machine or ten thousand, makes managing your infrastructure too easy. New accounts get $100 in credit to use in your first 60 days. GitPrime – Ship faster because you know more. Not because you’re rushing. GitPrime helps software teams accelerate their velocity and release products faster by turning historical git data into easy to understand insights and reports. Rollbar – We move fast and fix things because of Rollbar. Resolve errors in minutes. Deploy with confidence. Learn more at rollbar.com/changelog. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Featuring:Rich Harris – GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XJerod Santo – Website, GitHub, LinkedIn, Mastodon, XShow Notes: Thanks to Kevin McGee for suggesting this interview on Ping The Great Divide by Chris Coyier Frameworks without the framework; why didn’t we think of this sooner? Rich’s spectacular work on display in a piece for The New York Times on Twitter bots Watch Rich’s talk at JSConf EU 2018, “Computer, build me an app” Svelte website Follow Svelte on Twitter Something missing or broken? PRs welcome!

Adam and Jerod talk to Kyle Daigle, the Director of Ecosystem Engineering at GitHub. They talk about GitHub Actions, the new automation platform announced at GitHub Universe this past October 2018. GitHub Actions is the next big thing coming out of GitHub with the promise of powerful workflows to supercharge your repos and GitHub experience. Build your container apps, publish packages to registries, or automate welcoming new users to your open source projects — with access to interact with the full GitHub API and any other public APIs, Actions seem to have limitless possibilities. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:DigitalOcean – DigitalOcean is simplicity at scale. Whether your business is running one virtual machine or ten thousand, DigitalOcean gets out of your way so your team can build, deploy, and scale faster and more efficiently. New accounts get $100 in credit to use in your first 60 days. GitPrime – GitPrime helps software teams accelerate their velocity and release products faster by turning historical git data into easy to understand insights and reports. Ship faster because you know more. Not because you’re rushing. Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Featuring:Kyle Daigle – Website, GitHub, XJerod Santo – Website, GitHub, LinkedIn, Mastodon, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XShow Notes: Learn more information about GitHub Actions Read this post by Jessie Frazelle on how a GitHub action works Marketplace of GitHub actions (only available to people in the public beta for now) Pull Reminders helps you remember to review code and get pull requests merged. Future of Software: Developers at the center of the universe This org has repos of different GitHub actions for many situations Adam logged Sarah Drasner’s list of awesome GitHub actions Article from GitLab about the importance of continous integration Something missing or broken? PRs welcome!

Adam caught up with Francesc Campoy at KubeCon + CloudNativeCon 2018 in Seattle, WA to talk about the work he’s doing at source{d} to apply Machine Learning to source code, and turn that codebase into actionable insights. It’s a movement they’re driving called Machine Learning on Code. They talked through their open source products, how they work, what types of insights can be gained, and they also talked through the code analysis Francesc did on the Kubernetes code base. This is as close as you get to the bleeding edge and we’re very interested to see where this goes. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog Clubhouse – The first project management platform for software development that brings everyone on every team together to build better products. Get an extra two months free - head to clubhouse.io/changelog Raygun – Unblock your biggest app performance bottlenecks with Raygun APM. Smarter application performance monitoring (APM) that lets you understand and take action on software issues affecting your customers. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Featuring:Francesc Campoy – Website, GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XShow Notes: An analysis of the Kubernetes codebase source{d} and the source{d} community JustForFunc Something missing or broken? PRs welcome!

Adam caught up with Brendan Burns (co-creator of Kubernetes and Partner Architect at Microsoft Azure) at KubeCon + CloudNativeCon 2018 in Seattle, WA to talk about the state of Kubernetes, the importance of community, building healthy cloud platforms, and the future of cloud infrastructure. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog Clubhouse – The first project management platform for software development that brings everyone on every team together to build better products. Get an extra two months free - head to clubhouse.io/changelog Raygun – Unblock your biggest app performance bottlenecks with Raygun APM. Smarter application performance monitoring (APM) that lets you understand and take action on software issues affecting your customers. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Featuring:Brendan Burns – GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XShow Notes: The Commons Clause Brendan’s talk at KubeCon — !go, Interacting with and Extending Kubernetes in a Polyglot World Read The Illustrated Children’s Guide to Kubernetes — Here’s a link to a pdf version of it Metaparticle is a standard library for cloud native applications on Kubernetes. cncf/artwork — CNCF related logos and artwork Something missing or broken? PRs welcome!

On this year’s “State of the ‘log’” episode we’re going behind the scenes to look back at 2018 as we prepare for 2019 and onward. We talk through our most popular episodes, most controversial episodes, and even some of our personal favorites. We also catch you up on some company level updates here at Changelog Media. We hired Tim Smith earlier this year as our Senior Producer, we retired Request for Commits, started some new shows… Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog Algolia – Our search partner. Algolia’s full suite search APIs enable teams to develop unique search and discovery experiences across all platforms and devices. We’re using Algolia to power our site search here at Changelog.com. Get started for free and learn more at algolia.com. Featuring:Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XJerod Santo – Website, GitHub, LinkedIn, Mastodon, XShow Notes:Before we officially head into the year end I wanted to take a moment to thank you for your time and attention, it means the world to us. We work very hard to produce this podcast and we do it for you, the listeners — so thank you. Please be safe over the holiday break. Enjoy your time with family, friends, and loved ones. We’ll see you again in 2019! Most popular episodes #291 – Winamp2 JS with Jordan Eldredge #288 – Live coding open source on Twitch with Suz Hinton #295 – Scaling all the things at Slack with Julia Grace #298 – The beginnings of Microsoft Azure with Julia White #297 and #314 on GraphQL Most controversial #300 – Corporate interests in open source and dev culture with Zed Shaw Throwback to #205 – A protocol for dying with Pieter Hintjens Staff favorites Adam: Drupal is a pretty big deal Jerod: A call for kindness in open source New shows! You can listen to Backstage on the web or subscribe via Master You are subscribed to Master, right? 😉 Listen to the new and improved JS Party Founders Talk is back in a big way! Tim Smith’s Away from Keyboard is a must-listen Maybe start with episode #4? We didn’t talk too much about Practical AI, but it’s rad too Something missing or broken? PRs welcome!

Jerod is joined by Andrew Nesbitt and Ben Nickolls to talk Octobox, their open source web app that helps you manage your GitHub notifications. They discuss how Octobox came to be, why open source maintainers love it, the experiments they’re doing with pricing and business models, and how Octobox can continue to thrive despite GitHub’s renewed interest in improving notifications. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog GoCD – GoCD is an on-premise open source continuous delivery server created by ThoughtWorks that lets you automate and streamline your build-test-release cycle for reliable, continuous delivery of your product. Command Line Heroes – A new podcast about the epic true tales of the developers, hackers, and open source rebels revolutionizing the tech landscape from the command line up. Presented by Red Hat. Featuring:Andrew Nesbitt – Website, GitHub, XBenjamin Nickolls – GitHub, XJerod Santo – Website, GitHub, LinkedIn, Mastodon, XShow Notes: Andrew was a guest on The Changelog #188 and Request For Commits #3 The two met at a 24 Pull Requests event They’ve been working on Libraries.io for the last couple of years When it comes to clipboard managers, Andrew recommends Alfred For all things Octobox, start right here Or jump straight to its GitHub repo Find Octobox on GitHub Marketplace Or support the community on Open Collective Their Roadmap is also open source Something missing or broken? PRs welcome!

Adam and Jerod talk with Dominic Tarr, creator of event-stream, the IO library that made recent news as the latest malicious package in the npm registry. event-stream was turned malware, designed to target a very specific development environment and harvest account details and private keys from Bitcoin accounts. They talk through Dominic’s backstory as a prolific contributor to open source, his stance on this package, his work in open source, the sequence of events around the hack, how we can and should handle maintainer-ship of open source infrastructure over the full life-cycle of the code’s usefulness, and what some best practices are for moving forward from this kind of attack. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog GoCD – GoCD is an on-premise open source continuous delivery server created by ThoughtWorks that lets you automate and streamline your build-test-release cycle for reliable, continuous delivery of your product. Command Line Heroes – A new podcast about the epic true tales of the developers, hackers, and open source rebels revolutionizing the tech landscape from the command line up. Presented by Red Hat. Featuring:Dominic Tarr – Website, GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XJerod Santo – Website, GitHub, LinkedIn, Mastodon, XShow Notes: The issue that kicked off everything We covered the incident on Changelog News Here’s Dominic’s statement that we reference repeatedly Felix Krause had some on-point commentary on Twitter TideLift says event-stream gets 2 million downloads per week SwiftOnSecurity also chimed in on Twitter Learn more about Project Xanadu We discussed Reproducible Builds with Chris Lamb back in the day Also check out A call for kindness in open source with Brett Cannon Something missing or broken? PRs welcome!

Perry Mitchell joined the show to talk about the importance of password management and his project Buttercup — an open source password manager built around strong encryption and security standards, a beautifully simple interface, and freely available on all major platforms. We talked through encryption, security concerns, building for multiple platforms, Electron and React Native pros and woes, and their future plans to release a hosted sync and team service to sustain and grow Buttercup into a business that’s built around its open source. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog GoCD – GoCD is an on-premise open source continuous delivery server created by ThoughtWorks that lets you automate and streamline your build-test-release cycle for reliable, continuous delivery of your product. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Featuring:Perry Mitchell – Website, GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XJerod Santo – Website, GitHub, LinkedIn, Mastodon, XShow Notes: Buttercup Have I Been Pwned: Check if your email has been compromised in a data breach Key derivation function on Wikipedia Sallar Kaboli on GitHub Buttercup Roadmap Why I love password managers on Changelog News reproducible-builds.org The Changelog #237: Reproducible Builds and Secure Software with Chris Lamb ownCloud - The leading OpenSource Cloud Collaboration Platform Nextcloud KeePass Password Safe Open Source Password Management Solutions Something missing or broken? PRs welcome!

In this special crossover episode of Founders Talk, Adam talks with Donald Fischer. Donald Fischer and the team at Tidelift are on a mission of making open source work better — for everyone. To pay the maintainers of open source software they are putting a new spin on a highly successful business model that’s a win-win for the maintainers as well as the software teams using the software. In this episode we dig into that backstory and Donald’s journey. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog GoCD – GoCD is an on-premise open source continuous delivery server created by ThoughtWorks that lets you automate and streamline your build-test-release cycle for reliable, continuous delivery of your product. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Featuring:Donald Fischer – Website, GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XShow Notes: There’s over $1M to pay open source maintainers on Tidelift It’s time to pay the maintainers! Tidelift Is React’s development “supported” by Facebook? That depends. Havoc Pennington Jeremy Katz Luis Villa Listen to the original episode. Something missing or broken? PRs welcome!

This week Adam and Jerod talk with Brian Bondy, Co-founder and CTO of Brave. They talked through the beginnings of Brave and how BAT (Basic Attention Token) could be driving the future of how we offer funding and tips to our favorite websites and content creators. Of course, they go deep into the historical and the technical details of the Brave browser and their march to Brave 1.0. The last segment of the show covers how BAT works, how it’s being used, and also their interesting spin on an ad model that respects the user’s privacy. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. DigitalOcean – DigitalOcean is simplicity at scale. Whether your business is running one virtual machine or ten thousand, DigitalOcean gets out of your way so your team can build, deploy, and scale faster and more efficiently. New accounts get $100 in credit to use in your first 60 days. Algolia – Our search partner. Algolia’s full suite search APIs enable teams to develop unique search and discovery experiences across all platforms and devices. We’re using Algolia to power our site search here at Changelog.com. Get started for free and learn more at algolia.com. GoCD – GoCD is an on-premise open source continuous delivery server created by ThoughtWorks that lets you automate and streamline your build-test-release cycle for reliable, continuous delivery of your product. Featuring:Brian Bondy – Website, GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XJerod Santo – Website, GitHub, LinkedIn, Mastodon, XShow Notes: Brave Browser Browser.html, an experimental Servo browser in HTML Muon, a fork of the Electron framework Request For Commits #11: Funding the Web with Brendan Eich Tracking Protection in Firefox For Privacy and Performance StatCounter Global Stats, Browser Market Share Worldwide BAT (Basic Attention Token) Something missing or broken? PRs welcome!