Under the nonprofit Linux Foundation, "a new Sustaining Package Registries Working Group will seek to identify concrete funding, governance, and security practices," reports ZDNet, "to keep code flowing as download counts grow.... Because software builds, continuous integration pipelines, and AI systems hammer registries at machine speed rather than human speed, the sites can't keep up.
"That growth has brought a surge in bot traffic, automated publishing, security reports, and outright abuse, exposing what the working group bluntly calls a 'sustainability gap'."

Sonatype CTO Brian Fox, who oversees the Maven Central Java registry, estimates open-source registries saw 10 trillion downloads in 2025. And "The same pattern is appearing across ecosystems. More machine traffic. More automation. More scanning. More expectations around uptime, integrity, provenance, and policy enforcement. More cost. More support burden. More dependency on infrastructure that the industry still talks about as though it runs on goodwill and spare time."

ZDNet reports that "To tackle that, Sonatype has teamed up with the Linux Foundation and other package registry leaders, including Alpha-Omega, Eclipse Foundation (OpenVSX), OpenJS Foundation, OpenSSF, Packagist, Python Software Foundation, Ruby Central (RubyGems), and the Rust Foundation (Crates)."

The idea is to give operators a neutral forum to discuss money, governance, and shared operational burdens openly. Once that's dealt with, they'll coordinate how to explain those realities back to companies and organizations that have long assumed registries are "free." No, they're not. They never were. As the Linux Foundation pointed out, "Registries today run primarily on two things: (1) infrastructure donations and credits; and (2) heroic efforts from small paid teams (themselves funded by donations and grants) and unpaid volunteers that operate and maintain registry services. The bulk of donations and grants comes from a small set of donors and doesn't scale with demands on the registry."
The working group is explicitly positioned as a venue where registry leaders and ecosystem stakeholders can align on "practical, community-minded" ways to sustain that infrastructure, rather than each operator improvising its own survival plan in isolation.


ZDNet says the group will also coordinate security practices and information, and craft frameworks "that make it politically and legally possible to introduce sustainable funding models without fracturing communities." And they will also "align messaging and educational content so developers, companies, and policymakers finally understand what it costs to run these services."

Read more of this story at Slashdot.

Greg Adams Photography posted a photo:

Vienna, Austria

Thomas Hawk posted a photo:

Thomas Hawk posted a photo:

date stamped on back of slide, November 1973

A new generation of moms is saying "enough." (WSJ) After decades where the dominant expectation for high-achieving parents was to intensively helicopter, a new generation of moms is saying "enough." They're reclaiming date night, saying no to schlepping to 17 different after-school activities and making peace with dirty dishes in the sink.

Women have always shouldered the bulk of household and child-rearing responsibilities. But it's only recently that mothers were also expected to be project managers for their kids' futures. That began around the 1990s, economists say, as widening inequality and a shift toward a knowledge-based economy made parents fear their children would fall behind without a competitive edge. Good parenting in some enclaves came to include fighting to get toddlers into exclusive preschools, putting extreme limits on screen time—or later, tracking apps on teenagers' phones—and finishing Girl Scout Gold Award projects for kids so they could list them on college applications. (Thanks for that last one, mom.) The trend was exemplified by Amy Chua's infamous 2011 hit book "Battle Hymn of the Tiger Mother" (although many moms used the memoir to reassure themselves they weren't that bad). The rise of gentle parenting added emotional complexity to this labor, turning every toddler tantrum into an opportunity for a measured lesson in self-regulation. Suddenly, it wasn't enough to optimize a child's chance for success. Mothers had to follow a set of guidelines that required superhuman patience, too.

Het wangedrag van chef-kok René Redzepi van het wereldberoemde Kopenhaagse restaurant Noma staat niet op zichzelf.

maeshu has added a photo to the pool:

Katchan Ramen