Open Source with Fexingo: Linux, GitHub, and Community-Driven Software Conversations

Lucas and Luna explore the delicate balance of enforcing codes of conduct in open source communities. They examine the controversial case of the Vim project's 2024 maintainer dispute, where a long-time contributor was banned for violating the project's code of conduct after a heated exchange about a patch. The episode also covers the Linux kernel's shift to a more formal enforcement process in 202...

When a project's maintainer steps down, what happens? In this episode, Lucas and Luna dig into the mechanics of maintainer succession in open source — using the real example of the curl project and Daniel Stenberg's long-running stewardship. They explore why formal succession planning is rare, how projects like Node.js and Python have managed transitions, and what the research on bus factor tells...

In this episode of Open Source with Fexingo, Lucas and Luna explore how the Tor Project maintains its commitment to anonymity while facing legal pressure from governments and law enforcement. They discuss the recent 2025 German court case that forced Tor to identify a user during a criminal investigation, and how the project's response—refusing to comply and fighting the order—demonstrates the ten...

PostgreSQL is famous for never breaking upgrades — but how? This episode unpacks the actual engineering and governance practices that let the Postgres project maintain near-perfect backward compatibility across two decades. Lucas and Luna walk through the major version upgrade process, the 'don't break userspace' philosophy, and what happens when the committers have to choose between a cleaner cod...

In this 100th episode of Open Source with Fexingo, Lucas and Luna dive into one of the most under-discussed challenges in open source: long-term maintenance debt. Using the real-world case of the OpenSSL library—which underpins encryption across the internet—they explore how critical projects accumulate years of technical debt, security patches, and orphaned code. Lucas breaks down the Heartbleed...

Episode 99 of Open Source with Fexingo tackles one of the most complex infrastructure challenges facing open source: migrating cryptographic algorithms before quantum computers break them. Lucas and Luna dive into the Open Quantum Safe project, focusing on the liboqs library and the ongoing effort to integrate post-quantum cryptography into OpenSSL, the foundation of internet encryption. They walk...

Lucas and Luna unpack how open source projects manage intellectual property (IP) without a legal team on retainer. They focus on the concrete case of the Contributor License Agreement (CLA) used by the Apache Software Foundation and compare it with the Developer Certificate of Origin (DCO) popularized by the Linux Kernel. The episode walks through why CLAs can create friction for new contributors,...

In the open source ecosystem, semantic versioning—or SemVer—is supposed to make dependency management predictable. But what happens when maintainers disagree on what constitutes a 'breaking change'? This episode dives into the real-world tension between strict SemVer adherence and pragmatic compatibility promises, using the 2025 HTTP library conflict as a case study. Lucas and Luna explore how pro...

Episode 96 of Open Source with Fexingo dives into the often-overlooked world of open source license compliance at enterprise scale. Lucas and Luna explore how projects like Linux and Kubernetes manage thousands of dependencies with differing licenses—GPL, MIT, Apache, and more. They break down real-world challenges: the 2023 lawsuit over Vizio's GPL violations, the role of tools like FOSSA and Sny...

Episode 95 dives into governance forking in open source: when a community splits not over code but over decision-making processes. Lucas and Luna examine the case of Vibe, a Python-based package for audio processing, where a governance fork created two coexisting leadership models. They discuss what sparked the split — a dispute over maintainer veto power — and how both forks have evolved with dif...

Maintainer burnout is a silent crisis in open source. In this episode, Lucas and Luna dig into the specific structures that help — or fail — to prevent it. They look at the Python project's governance model, which uses a steering council to distribute decision-making, and contrast it with the BDFL (Benevolent Dictator for Life) model that concentrated power in one person. They also examine how the...

Every open source project depends on others—but what happens when a critical upstream library breaks your build or changes its license? In this episode, Lucas and Luna dig into the real-world mechanics of dependency conflict management. They walk through the 2023 axios vulnerability, where a single critical JavaScript HTTP library stalled thousands of projects, and contrast it with how the Rust ec...

In this episode of Open Source with Fexingo, Lucas and Luna explore how open source projects navigate the wide range of motivations that bring contributors to the table — from hobbyists coding for fun to professionals paid by employers, from documentation writers to issue triagers. Using the Kubernetes project as a concrete case, they discuss how different contribution paths can coexist without fr...

Episode 91 of Open Source with Fexingo tackles one of the messiest moments in community-driven software: deprecation. Lucas and Luna walk through the 2025 deprecation of the npm package 'left-pad' — yes, that one — and how Node.js maintainers handled removing a module that thousands of projects depended on. They break down the three-phase deprecation framework used by major projects like OpenSSL a...

In this episode of Open Source with Fexingo, Lucas and Luna explore the delicate art of publishing security audit reports in open source projects. Using the 2025 curl audit as a case study—where 23 issues were found and disclosed transparently—they discuss the tension between full disclosure and responsible vulnerability handling. They cover how projects like curl, OpenSSL, and systemd structure t...

Lucas and Luna explore how open source communities manage translation and internationalization at scale. Using the GNOME project's switch from Damned Lies to Weblate as a concrete case, they discuss the challenges of maintaining translations across hundreds of languages, the role of automated tooling, and why translation is both a technical and social problem. The episode also touches on how small...

Episode 88 of Open Source with Fexingo digs into the delicate art of security vulnerability disclosure in open source projects. Lucas and Luna walk through the process behind the recent critical patch in the Curl project — how a memory safety bug in the HTTP/3 stack was privately reported, triaged, and publicly released within a 90-day window. They break down the roles of the distros list, the CVE...

In Episode 87 of Open Source with Fexingo, Lucas and Luna tackle the uncomfortable question of money in open source. Using the concrete example of the curl project—which maintains one of the most widely-used tools on the internet on a shoestring budget—they explore how maintainers fund their work, why corporate sponsorship isn't always the answer, and what alternative models like Open Collective a...

Lucas and Luna explore the growing practice of treating documentation as code in open source projects, using the example of the Astro documentation rewrite in 2025 that reduced support tickets by 40 percent. They discuss how version-controlled docs, automated testing of code examples, and contribution workflows similar to pull requests improve accuracy and maintainability. The episode also covers...

Episode 85 of Open Source with Fexingo dives into the tricky process of adding new maintainers to a project. Lucas and Luna explore why the Linux kernel uses a multi-year apprenticeship model, how Rust's core team rotates maintainers, and what happens when a project like Homebrew scales from 1 to 100 maintainers. They discuss concrete onboarding practices: shadowing, commit rights escalation, and...

When a project maintainer goes silent—or dies—what happens to the domains, social media handles, and package manager accounts they controlled? This episode of Open Source with Fexingo looks at the specific case of the 'Pretty Good Privacy' library OpenPGP.js, whose primary maintainer stopped responding in 2023. We walk through how the remaining contributors navigated domain renewal, transfer of th...

In this episode of Open Source with Fexingo, Lucas and Luna unpack one of the messiest problems in open source: dependency hell. They use the 2024 xz utils backdoor as a concrete anchor — a single maintainer burnout nearly led to a supply-chain catastrophe. Then they zoom in on how tools like Dependabot, Renovate, and the npm audit ecosystem try to keep dependencies sane, and why the real fix is c...

Lucas and Luna explore the delicate balance open source projects face when promising API stability. Using the Linux kernel's 'no regressions' policy and the Node.js semver approach as contrasting case studies, they unpack how projects like Kubernetes and Python manage the tension between innovation and breaking changes. They discuss the real-world cost of instability for downstream consumers and t...

Episode 81 of Open Source with Fexingo dives into the unsung challenge of hardware compatibility testing in open source projects. Lucas and Luna explore how the LibreBoot project tests firmware across hundreds of motherboard models without dedicated hardware labs, why the Raspberry Pi kernel team relies on community-driven CI with real devices, and what happens when your open source OS won't boot...

In this episode of Open Source with Fexingo, Lucas and Luna explore how open source projects are tackling accessibility barriers in software development. They focus on the specific case of the NVDA screen reader, an open source tool for blind users, and discuss how projects like React and Vue are incorporating accessibility checks into their core workflows. Lucas shares data on the estimated 285 m...