Is Open Source Software Infrastructure?
· Summarized
Key takeaways
- Open source software is vital for government and infrastructure but is underfunded.
- The EU's regulations on Apple have yet to effect meaningful change in how browsers operate on iOS.
- Kiro's agent hooks present a new way to automate tasks in development, although caution is recommended.
- A recent npm attack shows the need for increased security measures for open source maintainers.
- Using the CSS media query @media (hover: hover) can improve user experiences by properly managing hover states on different devices.
Summary
GitHub Advocating for an EU Tech Fund
The episode kicks off with a discussion on GitHub's new role as an advocate for establishing a tech fund in Europe. The team delves into how open source software (OSS) is an essential component of government and infrastructure yet remains underfunded. They highlight a German model that successfully funds OSS maintainers, suggesting that similar initiatives should be adopted at the EU level. The potential economic impact is enormous, with figures showing OSS contributing billions to EU economies. Despite concerns about government involvement, the conversation posits that funding OSS is crucial as it serves the public good.
Apple vs. the EU: Browsers and Rendering Engines
The talk transitions to a significant update on the ongoing battle between Apple and the EU regarding browser policies. The EU's Digital Markets Act classifies Apple as a 'gatekeeper' by limiting browsers to WebKit on iOS. Despite new regulations intended to encourage competition, no new browsers with different rendering engines have emerged. The team discusses barriers for companies wishing to comply, emphasizing that Apple’s restrictive policies essentially nullify the effectiveness of the regulation. The conversation raises skepticism about whether true competition will ever materialize on iOS.
Introduction of Agentic IDE: Kiro and Hooks
The podcast then introduces an exciting new development in the Integrated Development Environment (IDE) space with Kiro's agent hooks. This feature allows developers to automate tasks, such as updating documentation or tracking API changes, through customizable hooks that run on specific actions in the codebase. The hosts discuss their early experiences using Kiro, noting its capacity to streamline the development process while expressing caution about over-automation potentially complicating workflows.
Emerging Tools: Kilo Code and NPM Attack Recap
The team explores newly emerging tools for development, particularly Kilo Code, an AI coding agent toolkit for VS Code. With so many options available, they humorously remark on the challenge of evaluating numerous agent tools without getting sidetracked from actual development work. Moving on, they address a serious security incident involving the popular npm package eslint-config-prettier, which experienced a major supply chain attack due to the compromise of a maintainer's credentials. This highlights the vulnerabilities inherent in relying on open-source software.
CSS Media Query for Hover States
In a practical tip section, the hosts share insights on using the CSS media query `@media (hover: hover)`, which allows developers to target elements based on whether the user's primary input method can hover. This becomes particularly useful in avoiding hover-related issues on touch devices, enhancing user experience on mobile platforms.
Personal Highlights: What’s Making Us Happy
The episode wraps up with a segment on personal reflections and gratitude. TJ shares his excitement over acquiring the latest Apple Watch, while Paige discusses the soothing relaxation app she uses for white noise while traveling. Jack reveals his joy in revisiting physical books, emphasizing the tactile pleasure of reading and the nostalgia associated with printed literature.
Sponsors
- Blue Collar Coder · Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.
Show notes
GitHub is advocating for a European Union Sovereign Tech Fund to help pay the open source software developers building and maintaining software relied upon by economies and societies just like any other necessary infrastructure like roads and bridges.
Apple gets called out by the Open Web Advocacy group saying its technical rules and restrictions are blocking other browser vendors from successfully offering their own search engines to iOS users in the EU.
Last episode we talked about Amazon’s new AI coding editor Kiro, and this week, we learned about a feature called Agent Hooks which let users write automation tools that agents can use within the IDE to do predefined actions like maintaining code quality, checking for security vulnerabilities, standardizing and enforcing team processes, and more. Think of it like pre-commit hooks but with AI behind them!
Timestamps:
- 0:51 - GitHub is advocating for an EU tech fund
- 9:21 - An update on non-WebKit browsers on iOS
- 15:30 - Kiro’s agent hooks
- 26:28 - Kilo Code
- 28:35 - eslint-config-prettier got hacked
- 33:15 - @media(hover: hover)
- 36:05 - What’s making us happy
Links:
- Paige - GitHub is advocating for an EU Sovereign Tech Fund
- Jack - Kiro’s Agent Hooks
- TJ - An update on non-WebKit browsers on iOS
- Kilo Code - open source AI agent VS Code extension (not to be confused with the Kiro fork)
- Popular npm package eslint-config-prettier got hacked
- @media(hover:hover)
- Paige - Relax Meditation app
- Jack - Physical books like the Annihilation series
- TJ - Apple Watch series 10
Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account