GoodFirstIssue Weekly #2: An Open-Source Trifecta: Community, Security, and AI-Powered Development

In this week’s email

• Community Building Playbook: A Guide for Building Open-Source Communities

• A-OSS? What’s that?: Get the lowdown on Assured Open Source Software, one of Google’s answers to supply chain security attacks

• No more googling that, we’re co-piloting it: A look at the acceleration of software development with the wave of generative AI

Featured Open-Source Project of the Week

Chordly

Chordly is a free open-source online chord sheet creator/transposer tool. No account is required to starting using it, and the UI seems very straight forward to use. I’m not currently a musician, but back when I played in my high school band, this actually would’ve been pretty useful for me and my friends that wanted to play around with songs that we knew and wanted to experiment with!

Code repository link here

Chordly website is here

Potential Open-Source Issues for First Timers

- Use new Devise Turbo integration

Issue link here

Language: Ruby

- Explain better how data export is working and why we have it

Issue link here

Language: Go

- Increase unit testing coverage

Issue link here

Language: Python

As always, you can always find repositories in need of help at goodfirstissue.io

Cool Stories In the Open-Source Community

A Guide for Building Open-Source Communities

It’s pretty common knowledge that fostering communities with a shared common goal or belief is the best way to push your ideas forward. This article is a great step-by-step guide on establishing the foundation needed for building and sustaining a community around an open-source project or initiative that you’d like to share with as many people as possible.

Article link here

Google’s free Assured Open Source Software service hits GA

Supply chain security attacks are a serious matter that have been mostly been facilitated by open source software exploits. To combat this, Google created Assured Open Source Software a service that scans relevant open-source software for vulnerabilities to alert the users of the software packages of those vulnerabilities. This article goes to show how important open-source software is within many large companies that participate in the global supply chain, and how vulnerable they can be.

Article link here

How generative AI is changing the way developers work

This article has A LOT: How generative AI like LLMs work, How GitHub CoPilot works, GitHub’s plans for CoPilot outside of the editor (CoPilot for code reviews, documentation, etc), how developers are using generative AI, and so much more. I learned a ton from reading this and I’m sure I’ll be coming back to this one a lot as I continue to learn more about generative AI and how it can be used with GoodFirstIssue as a tool to help folks get into contributing to open-source software.

Article link here

This week’s quote

If you loved this newsletter, please share it with others!

Thanks for reading, and happy coding!