Security
ToolHive: Run Untrusted MCP Servers Without Handing Over Your Machine
ToolHive puts every MCP server in a container with a minimal permission profile. It shrinks the blast radius, it does not remove the bomb.
Tagged with
open-source
Open Source
Docker and Black Duck ship VEX-based CVE noise filter for containers
Docker + Black Duck auto-suppress phantom CVE alerts with VEX
Open Source
HauhauCS Stripped Heretic, Renamed the Files, and Took 5 Million Downloads on the Way Out
Five million monthly downloads, 22 models, no attribution. The package was deleted; the wheels were not.
DevEx
The Linux Kernel's AI Code Policy Is Refreshingly Boring
AI can write the patch, but only a human signs the DCO. Torvalds points out the slop crowd won't self-report anyway.