Open Source with Fexingo: Linux, GitHub, and Community-Driven Software Conversations

Episode 37 of Open Source with Fexingo dives into semantic versioning, the system that powers how millions of open source packages communicate changes. Lucas and Luna break down what version numbers like 2.1.4 actually mean, why the Linux kernel famously refuses to follow semver, and how npm's dependency crisis of 2016 exposed the risks of trusting version ranges blindly. They discuss real-world e...

Episode 36 of Open Source with Fexingo. Lucas and Luna explore the delicate balance between collecting usage data and respecting user privacy in open source software. They dive into the recent controversy around the Rust-based code editor Zed, which added telemetry in version 0.153 and faced backlash from its community. The conversation covers what Zed collected (editor metrics, OS version, sessio...

Episode 35 of Open Source with Fexingo digs into a high-stakes case: the 2018 Node.js code of conduct conflict that splintered its technical steering committee. Lucas and Luna trace how one GitHub issue escalated from a comment about 'toxic masculinity' to a fork and a governance overhaul, and why most major open source projects now employ explicit conflict-resolution pathways. They discuss the te...

Episode 34 of Open Source with Fexingo. Lucas and Luna dive into the tricky business of open source end-of-life cycles, using Python 2's sunset in 2020 as their anchor. They break down the logistical and emotional challenge: how maintainers decide when to stop supporting a version, manage the transition for users, and avoid community backlash. Specifics include the Python Software Foundation's tim...

When a company like Google or Microsoft wants to contribute code to an open source project, how does that actually work without the project losing control? In this episode, Lucas and Luna break down the specific case of Kubernetes — the container orchestration platform born inside Google, then donated to the Cloud Native Computing Foundation. They walk through the Contributor License Agreement pro...

In episode 32 of Open Source with Fexingo, Lucas and Luna explore the growing challenge of dependency churn in open source projects. With over 2.5 million packages on npm alone, maintainers face constant updates, security patches, and breaking changes. The hosts dive into the story of a single Node.js utility library that depended on 1,200 packages — and how its creator trimmed it down to just 12....

Ep 31: Lucas and Luna dive into the unseen work of open source community moderation. Using the Linux kernel's Code of Conduct Committee and the Django project's moderation practices as specific cases, they explore how projects handle toxic behavior, ban appeals, and scale rules from 10 to 10,000 contributors. They discuss the tension between maintainer burnout and inclusive governance, and why cle...

Lucas and Luna dive into the messy reality of bug bounty programs in open source. They explore the tension between well-funded programs at companies like Google and Microsoft, and the unfunded, volunteer-driven projects that handle critical vulnerabilities with zero budget. Using the Linux kernel's patch-based model and the HackerOne platform as contrasting case studies, they unpack why bug bounti...

In Episode 29 of Open Source with Fexingo, Lucas and Luna dive into accessibility at the code level — not just UI design, but how open source projects like React and WordPress build inclusive developer experiences. They break down ARIA landmarks, semantic HTML, and the real cost of ignoring accessibility in open source. Along the way, they share a behind-the-scenes look at how listener support kee...

Lucas and Luna explore how open source projects like the GNOME desktop environment and the React ecosystem approach accessibility at the code level. They look at the specific practices that make software usable for people with disabilities, including screen reader support, keyboard navigation, and color contrast checks. Lucas explains the role of tools like Axe and the Web Content Accessibility Gu...

Episode 27 of Open Source with Fexingo explores the most dramatic fork in recent open source history: the 2024 Terraform-to-OpenTofu split. Lucas and Luna trace how a license change by HashiCorp triggered a community revolt, a legally risky fork, and a new governance model that has since attracted over 25,000 GitHub stars and more than 200 contributors. They examine why forking is often seen as a...

Open source licensing is often thought of as a one-time decision, but disputes can arise years later when projects change direction or companies use code in ways the original authors didn't anticipate. In this episode, Lucas and Luna dive into a specific case: the 2018 Redis module licensing change that split the community, created a fork called KeyDB, and forced developers to reconsider what 'ope...

In this episode, Lucas and Luna dive into how the Eclipse Foundation triaged and patched the Log4Shell vulnerability in the ecosystem's Java projects. They break down the mechanics of coordinated disclosure, the role of the Eclipse Foundation's security team, and why open source projects rely on community reporting as much as automated scanning. They use the real example of a volunteer maintainer...

When an open source project grows beyond a handful of contributors, who decides what gets merged? This episode looks at how communities like Kubernetes, the Linux kernel, and the Node.js project have built formal governance models — from benevolent dictators to technical steering committees to foundations with corporate board seats. Lucas and Luna walk through Kubernetes' three-stage governance ev...

Episode 23 of Open Source with Fexingo looks at an uncomfortable reality behind community-driven software: the human cost of managing toxic behavior in issue trackers and pull requests. Lucas and Luna talk through a specific case from the Kubernetes project, where maintainers publicly stepped back after repeated hostile comments. They explore the data from a 2024 Linux Foundation survey showing th...

We dive into how the Fedora Linux project ships a new release every six months like clockwork — something most corporate product teams struggle to do. Lucas explains the 'feature freeze' mechanism that prevents scope creep, how contributors coordinate across time zones using IRC and mailing lists, and why Fedora's release engineering team treats the schedule as sacred. Luna pushes back on whether...

When a critical open-source developer dies, who takes over? This episode examines the systematic side of project succession — the legal, technical, and social structures that keep code alive after its creator is gone. Lucas and Luna walk through the 2021 death of core Node.js contributor Ian Sutherland, how the community handled his modules, and how the Linux Foundation's TSC protocol actually wor...

In this episode of Open Source with Fexingo, Lucas and Luna dive into how open source projects coordinate vulnerability disclosures without formal incident response teams. They examine the recent critical flaw in the libwebp library, which affected millions of applications. Lucas explains how maintainers discover issues, coordinate with downstream consumers, and deploy patches before public disclo...

Good documentation is the unsung backbone of open source sustainability. In this episode, Lucas and Luna explore why projects like Django and Kubernetes invest heavily in docs, how the Write the Docs community emerged as a critical resource, and why maintainers say documentation is as important as code itself. They discuss real numbers: the Django Girls tutorial has been translated into 25 languag...

When a beloved open-source project suddenly loses its primary maintainer, what happens? In this episode of Open Source with Fexingo, Lucas and Luna explore the unsung heroes who step up when creators move on. Using the real case of the popular JavaScript library 'left-pad' and its chaotic removal from npm in 2016, they examine how community-driven handoffs work—and sometimes fail. They discuss the...

Lucas and Luna explore a challenge every open-source community faces: what to do with old, working code that nobody wants to maintain. They trace the story of the cURL project, a 30-year-old library that billions of devices rely on, and how lead maintainer Daniel Stenberg has kept it alive with minimal resources. They discuss the economics of legacy maintenance, the emotional toll of saying no to...

Lucas and Luna dive into the underappreciated work of open source maintainers when a security vulnerability is reported. They walk through the real process behind a coordinated disclosure — from the initial private report to the public patch — using the example of a hypothetical critical bug in a widely used library like OpenSSL or curl. Lucas explains the tension between full transparency and res...

In this episode, Lucas and Luna explore how major open-source projects like Linux, PostgreSQL, and Blender succeeded with minimal or no venture capital funding. They break down the specific economic structures—foundation sponsorship, dual licensing, paid support models—that allowed community-driven software to compete with VC-backed startups. The conversation drills into Blender's 2002 crowdfundin...

Why don't open-source projects run Super Bowl ads? In this episode, Lucas and Luna explore how community-driven software like Linux, Kubernetes, and PostgreSQL built billion-dollar ecosystems with zero traditional marketing spend. They break down the mechanics of organic adoption: how a single GitHub pull request can be more persuasive than a 30-second spot, why enterprise buyers trust peer recomm...

Open source software runs the internet, but who actually maintains it? In this episode, Lucas and Luna explore the hidden infrastructure behind projects like the Linux kernel and the npm registry. They discuss the maintainer bottleneck, the rise of sponsored open source work through companies like Red Hat and Google, and the emotional toll on developers who keep critical code alive for free. With...