Go · Go in production
easypprof: Production-Safe pprof for Go Services
easypprof serves Go's pprof on a loopback listener with token auth, a duration cap, a concurrency limit and an audit log, so production profiling is safe.
Open Source
Everything tagged Open Source, newest first.
Tagged Open Source
What Git 3.0's SHA-256 Migration Gets Wrong About Real Attacks
GitHub co-founder Scott Chacon argues Git 3.0's switch to SHA-256 will cost the industry years of broken tooling to defend against an attack nobody has actually pulled off. Developers in the discussion pushed back hard, and not all of it held up.
When AI-Assisted Code Reinvents a Protocol, Badly
A federated, IRC-speaking chat network shipped this week with working tests and full docs, built largely with an AI coding assistant. Developers reviewing it say it reinvents about half of XMPP, without XMPP's years of hardening.
What Government NixOS Migrations Get Right About Vendor Lock-In
Governments in the Netherlands, France and Germany are rebuilding their desktop stack on declarative Linux instead of Windows. Developers say the operating system was the easy swap, and point to where these projects will really stall.
pREST v2 Guide: Versions, Upgrade Path and Where to Start
pREST is an open-source Go server that turns PostgreSQL into a REST API and a read-only MCP endpoint. Every v2 release, the advisories, and where to start.
win95 v2.0.0 and v2.0.1: A Windows 95 Theme for VS Code and Cursor
win95 v2.0.0 reworks the Windows 95 VS Code theme for readability — silver-gray editor, navy activity bar, teal status bar. v2.0.1 publishes it to Open VSX so Cursor, VSCodium and Windsurf can install it.
pREST v2.4.1 and v2.4.2: You Cannot Blacklist Your Way Out of SQL Injection
pREST v2.4.1 closes an 8.6 SQL injection in _QUERIES templates and an /_mcp catalog-exposure bypass — then its SQL-keyword blacklist silently blanked 17.5% of one production catalog. v2.4.2 replaces screening with real parameter binding, adds script path-traversal containment, and enforces RFC 7518 minimum JWT key sizes.
pREST v2.4.0: pgvector Search, OpenTelemetry, and Six More SQL Injection Fixes
pREST v2.4.0 adds pgvector nearest-neighbor search and distance filtering, opt-in OpenTelemetry tracing/metrics/logs with a local SigNoz stack, and closes six SQL-injection-adjacent security gaps found via advisory review — including a sibling of the v2.3.0 _select fix living in _groupby.
Vault: A Search-First File Manager to Replace Finder
Vault is a minimal, cross-platform file manager built around search instead of folder trees — Go and Wails under a React UI, 353ms cold start, ~80MB idle RAM, OS-trash-only deletes, and an MCP server so an AI client can drive it.
pREST v2.3.0: Critical SQL Injection Fix and the Adapter Registry
pREST v2.3.0 closes an unauthenticated SQL injection in the _select parameter (CVSS 9.8), migrates JWKS handling to jwx v3, and completes the multi-adapter registry that isolates TimescaleDB features from the base Postgres adapter.
pREST v2.2.0: Studio, Database Queries, and TimescaleDB
pREST 2.2.0 ships an embedded Studio UI, database-backed custom queries, and first-class TimescaleDB support—making instant Postgres APIs easier to explore and operate.
pREST vs PostgREST: An Honest Comparison From pREST's Maintainer
pREST and PostgREST both turn PostgreSQL into a REST API. PostgREST is Haskell and RLS-first; pREST is Go with config ACL, multi-database routing and MCP.
pREST AI Tooling — MCP Adapter, Cursor Plugin, and OpenClaw Skills
pREST AI tooling ships prest-mcp stdio adapter, Cursor plugin rules/skills, and OpenClaw ClawHub skills — read-only PostgreSQL access for agents via the /_mcp endpoint.
How to Use pREST's MCP Server — Query PostgreSQL from Cursor, Claude, or curl
pREST v2.1.0 MCP server exposes read-only PostgreSQL queries over HTTP — connect from Cursor, Claude Desktop, or curl with permission-aware ACL and no separate MCP process.
pREST v2.0.0 and v2.1.0 — PostgreSQL REST API with Multi-Database and MCP
pREST v2 is a Go PostgreSQL REST API with multi-database registry in v2.0.0 GA and a read-only MCP server in v2.1.0 — permission-aware Postgres queries for agents and API clients.
pREST v2.0.0-rc6 — Hexagonal Architecture and the Adapter Refactor
pREST v2.0.0-rc6 splits the monolithic Adapter into port interfaces, wires HTTP controllers through dependency injection, and keeps a backward-compatible composite Adapter for Go teams running Postgres REST APIs.
Building an Internal Hackathon Management Platform with Go and Buffalo
How I built a production-ready, enterprise-grade platform for running internal company hackathons using Go, Buffalo framework, and PostgreSQL—complete with audit logging, role-based access control, and a comprehensive admin dashboard.