Anthropic said on March 17, 2026 that open source security is becoming more important as AI grows more capable. In its X post, the company said it is donating to the Linux Foundation to help secure the software foundations AI depends on.
#open-source
RSS FeedA LocalLLaMA thread on March 18, 2026 pushed fresh attention toward Mamba-3, a new state space model release from researchers at Carnegie Mellon University, Princeton, Cartesia AI, and Together AI. The project shifts its design goal from training speed to inference efficiency and claims prefill+decode latency wins over Mamba-2, Gated DeltaNet, and Llama-3.2-1B at the 1.5B scale.
A Hacker News post on March 19, 2026 drew attention to agent-sat, an open-source project that lets AI agents iteratively improve weighted MaxSAT strategies. The repository says it has solved 220 of 229 instances from the 2024 MaxSAT Evaluation, beaten competition-best results on five instances, and produced one novel solve.
Google said it is pairing new funding with AI-powered security tooling to help open source maintainers respond faster as AI increases both vulnerability discovery and attack pressure. The announcement combines a collective $12.5 million pledge through Alpha-Omega with wider use of tools such as Big Sleep, CodeMender, and Sec-Gemini.
A March 16, 2026 Hacker News post on a Cursor study reached 110 points and 61 comments. The paper says Cursor adoption raises project-level development velocity in the short run, but also produces a substantial and persistent rise in static analysis warnings and code complexity.
A March 9, 2026 LocalLLaMA discussion highlighted Fish Audio’s S2 release, which combines fine-grained inline speech control, multilingual coverage, and an SGLang-based streaming stack.
Hugging Face published LeRobot v0.5.0 on March 9, 2026, adding full Unitree G1 humanoid support, faster data pipelines, and new simulation and policy tooling. The release broadens LeRobot from robot arms toward a larger embodied AI stack.
StepFun opened more than a model card by releasing the Step-3.5-Flash-SFT dataset on Hugging Face. The repo bundles raw JSON data, tokenizer snapshots, and StepTronOSS-oriented compiled shards, while the Reddit discussion focused on reproducibility, reasoning traces, and the implications of the dual-license setup.
Together AI said on March 13, 2026 that v2 of Open Deep Research is fully free and open source. The companion blog describes a planner and self-reflection workflow for multi-hop web research and ships code plus evaluation assets for developers.
A March 13 Hacker News thread focused on a security report finding 39 active Algolia admin keys exposed across open-source documentation sites. The risk is not theoretical: the keys could modify or delete search indexes, poison results, and expose indexed content on trusted developer docs.
Anthropic published a coordinated vulnerability disclosure framework on March 6, 2026 for vulnerabilities discovered by Claude. The policy sets a default 90-day disclosure path, a compressed 7-day path for actively exploited critical bugs, and a 45-day buffer after patches before technical details are usually published.
r/singularity pointed to Meituan's LongCat-Image-Edit-Turbo, a distilled open-source image editor that claims high-quality results in just 8 NFEs. The release pairs an Apache 2.0 Hugging Face model with a public arXiv report and community scrutiny over benchmark framing.