What the October 2026 PHP2Shell crisis teaches us about open source security, and how the same crisis could look if PHP were closed source.

PHP2Shell: The Safest Software Is the One You Can Verify and Fix

A The Bear-style analogy for Copilot agents vs instructions vs prompt files vs skills, plus practical API documentation maintenance examples.

The Bear in GitHub Copilot: Agents vs Prompts vs Skills vs Instructions

A global "Maintainer-ship Program" is crucial for the future of open source, as it directly addresses the overwhelming burden on current maintainers by training new ones through hands on, project focused work.

An Open Call: Let's Fund a Maintainer-ship Program for Open Source

If you're building an open source project with no budget and few contacts, start small: online events, free meetups, conference partnerships. This helped AsyncAPI grow a global community and find sponsors. Events aren’t just for visibility, they're for funding too.

Growing Our AsyncAPI Community and Finding Funds: A Step-by-Step Strategy for Open Source Projects

I'm exploring the challenges of sustainable funding in open source, arguing that current methods like donations and grants fall short due to unpredictability and administrative burden.

Sustainable Funding in Open Source

For years, API specifications like AsyncAPI and OpenAPI have been treated primarily as documentation tools—an afterthought in the development process. But what if we flipped the script?

Beyond Docs: Using AsyncAPI as a Config for Infrastructure

It's Valentine's Day so stop for a moment and think about how you can share some love in open source and for once not blame it for your technical debt.

Stop Blaming Open Source Slowness

What tools and local setup recommendations are out there that will make it easier to work with AsyncAPI documents

Working with AsyncAPI documents locally

These 3 predictions are based entirely on my observations and experience with GenAI over the last year.

3 GenAI Predictions for 2025

Get together all the communities from different API standards.

API Summit? API Standards? Getting us all together

Life of a FOSS maintainer ain't easy, but I'll keep pushing forward with determination.

What's next - Independent Maintainer and Educator

You already use open source, now it is time to secure your investment. The maintainers POV.

Become the RAJA or RANI of Open Source

My views on where we are with open source after attending three different open source events organized by three completely different parties

Open Source: Current State and Future Hopes

Let me clarify what it means that I'm an Execitive Director of AsyncAPI Initiative and let me set some goals for the future.

AsyncAPI Executive Director - What does it even mean?

In this article I'm exploring how to create a code generation template. My requirements are to use AsyncAPI document and AsyncAPI Generator.

Creating MQTT client code generator with AsyncAPI 2.x

No, this post is not about Musk. I don't care who facilitates town square as long as people that come to the square are not abused.

Town Square for tech is GitHub, far away from Twitter

On 8th of January the creator of faker.js and colors.js made a pretty visible political statement at the expence of the open-source community. Was it worth it?

Is it worth using Open Source for political statements?

I'm summarizing most critical things I managed to address in AsyncAPI in 2021 and what comes in 2022. I also share some key learnings.

What I did for AsyncAPI in 2021 and what comes in 2022

I summarize 3 harmful incidents that happened in open-source world in 2021. I try to summarize them and get into some conclusions.

Latest Articles

PHP2Shell: The Safest Software Is the One You Can Verify and Fix

The Bear in GitHub Copilot: Agents vs Prompts vs Skills vs Instructions