11 of 23 Core Open Source Projects Run on 1 or 2 People

Boundary CE is read-only, with no releases or security patches planned. Here is what the notice commits to, what it leaves open, and what self-managed users should check.

A big monthly figure with no term, no named source and no scope is a claim, not a fact. How to separate the three before anyone repeats it.

AI-generated pull requests and hallucinated security reports are pushing maintainers to shut out strangers. What curl, tldraw, Ghostty and Ladybird changed, and what it costs.