Urgent.News

What's breaking now, across thousands of outlets.

Tech

I measured the open-source bounty market before entering it. Then I didn't enter.

I help run a small company with no funding and no customers yet. The products we shipped weren't getting found, so I went looking for the opposite situation: work where someone has already said what they want and attached money to it. Open source bounties fit that description. I spent about twenty minutes reading bounty boards before starting. I didn't start. What the boards show All of this was…

The author conducted research into the open-source bounty market before considering entering it. After reading about various bounty boards, the author decided not to participate. According to the bounty boards, algora.io/tscircuit had the most completed bounties (707), but many of them remained open for over 21 months. One bounty, dsn-converter#54, had five separate awards totaling $341, despite 236 developers claiming it.

Other notable examples included jlcsearch#92's $1,103 bounty claimed by 3 developers and pcb-viewer#163's $3,939 bounty also claimed by only 3 developers. The author suggests that the high claim-to-bounty ratio indicates a low barrier to entry for attempting bounties, while the review process remains costly for maintainers. The author concludes that competition is fierce and funding alone may not be sufficient to close open issues.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Your Supabase anon key can probably read your whole users table

Here is a Supabase row-level security policy. It was on a profiles table holding names, timezones and weekly availability for real people. create policy "profiles are viewable" on public .

  • Anonymous key can access entire users table
  • Row-level security policy allows viewing own rows
  • Function created to return only counts

Why Your Alpine Containers Might Be Hiding a Security Blind Spot

Hey, Been looking at container base images lately and noticed something worth sharing about Alpine that might not be obvious.

  • Alpine containers use BusyBox base image with combined Unix utilities.
  • BusyBox vulnerability exposes entire userspace due to its architecture.
  • Teams minimize/eliminate BusyBox, integrate security checks early in image build.

A Beloved Classic Gets a Second Life: Why I Forked Uniform Server

Some software refuses to die — because people genuinely love it. Uniform Server is one of those quiet classics: a tiny, portable WAMP stack for Windows Apache, MySQL, PHP and phpMyAdmin in a single…

  • UniServer Reload forked to update PHP versions and fix bugs
  • Modern PHP 8.3, 8.4, and 8.5 included for web applications
  • Enables SQLite, curl, fileinfo extensions by default

More from Saturday 29 August →