Sunday, 22 March 2026

OpenAI acquires Astral (uv/ruff/ty), child protection laws push internet access control debate, and Deno faces layoffs amid stalled growth

Today's Lead

Simon Willison

Thoughts on OpenAI Acquiring Astral and uv/ruff/ty

OpenAI has acquired Astral, the company behind three critical Python development tools: uv (126 million monthly downloads), ruff (linting and formatting), and ty (type checking). The team joins OpenAI's Codex division with a commitment to continue open-source development and accelerate the tools' evolution. The acquisition mirrors Anthropic's earlier acquisition of Bun for JavaScript, underscoring the intense competition to control developer tooling infrastructure in the AI coding agent race — while raising concerns about concentrating too much of the Python ecosystem's critical infrastructure under a single corporation.

Read →

Also today

Dyne.org

Do Not Turn Child Protection Into Internet Access Control

Jaromil argues that age verification systems, while presented as child protection measures, are expanding into mainstream services and functioning as invasive identity-based access control across the internet. The real problem, he contends, is harmful business models — addictive recommendation algorithms and dark patterns — which should be regulated directly rather than building surveillance-capable permission infrastructure. Regulation should target harmful algorithms at the source rather than erecting identity gates that are easily bypassed by determined bad actors yet burdensome for legitimate users, and that create persistent identity layers repurposable for mass surveillance.

Read →

Armin Ronacher

Some Things Just Take Time

Armin Ronacher (creator of Flask, Jinja2, and Rye) argues that meaningful achievements require sustained effort that cannot be artificially accelerated — a direct challenge to tech culture's obsession with speed and AI-driven productivity. While AI accelerates code generation, eliminating all friction creates shallow, short-lived products ('vibe slop') rather than enduring systems. Quality relationships, trustworthy open-source projects, and thriving communities develop through years of consistent engagement, and tools promising time savings often just fill freed capacity with additional demands rather than enabling rest or reflection.

Read →

EFF

Blocking the Internet Archive Won't Stop AI, But It Will Erase the Web's Historical Record

Major publishers including the New York Times are blocking the Internet Archive's Wayback Machine in an attempt to prevent AI companies from scraping copyrighted content for training data. The EFF argues this strategy fails on both fronts: determined AI companies will find other data sources, while permanently erasing public access to over a trillion archived web pages used daily by researchers, journalists, and courts. Web archiving constitutes established fair use under law — similar to Google's book scanning — and blocking nonprofits while commercial scrapers persist is an ineffective and damaging policy choice.

Read →

Tinygrad

Tinybox — Offline AI Device Running 120B Parameter Models

Tinygrad is shipping Tinybox, a line of self-contained AI computing appliances designed to run large models entirely offline. The Red v2 ($12,000) packs 4x AMD 9070XT GPUs and 778 TFLOPS, benchmarked to outperform machines costing 10x as much in MLPerf Training 4.0. A more powerful Green v2 Blackwell ($65,000) offers 3,086 TFLOPS, and the company has announced an Exabox targeting 1 EXAFLOP with 720 RDNA5 GPUs for ~$10M in 2027 — aiming to democratize access to high-performance AI inference without cloud dependency.

Read →

David Bushell

Deno's Decline and Layoffs

Deno Land Inc. is facing significant headwinds despite raising $25.9M in funding, with recent staff layoffs and CEO Ryan Dahl remaining publicly silent about the company's direction. Deno Deploy suffered from inconsistent performance and ignored user feedback, while JSR (their JavaScript registry) failed to compete with alternatives due to poor infrastructure investment and confusing messaging. The situation illustrates that technical merit alone isn't sufficient to win in the runtime and tooling space — and that ecosystem trust, once lost, is difficult to rebuild.

Read →

Tooscut

Professional Video Editing, Right in the Browser with WebGPU and WASM

Tooscut is a non-linear video editor (NLE) that runs entirely in the browser using WebGPU and Rust compiled to WebAssembly, delivering near-native performance without any software installation. It supports unlimited multi-track video and audio editing, full keyframe animation with bezier easing, real-time GPU-accelerated effects, and keeps all media local to the user's machine for privacy. The project demonstrates how WebGPU and WASM together are beginning to close the performance gap between web and native creative applications.

Read →

Grafeo

Grafeo — A Fast, Lean, Embeddable Graph Database Built in Rust

Grafeo is an open-source graph database written in Rust using vectorized execution, adaptive chunking, and SIMD-optimized operations — and claims the top spot on the LDBC Social Network Benchmark in both embedded and server modes. It supports dual data models (Labeled Property Graphs and RDF triples) and six query languages including GQL, Cypher, Gremlin, GraphQL, SPARQL, and SQL/PGQ, with ACID transactions via MVCC snapshot isolation and vector search via HNSW quantization. The project targets use cases from edge devices to production clusters where performance and low memory footprint are critical.

Read →

James Garbutt

The Three Pillars of JavaScript Bloat

James Garbutt identifies three structural causes of oversized JavaScript dependency trees: legacy runtime support baked in for ES3/IE6 compatibility long after modern platforms became the norm, overly atomic package architectures that fragment minimal logic into single-use dependencies, and obsolete ponyfills for APIs like globalThis and Object.entries that persist in packages years after native support arrived. The cumulative effect is that every modern developer pays a performance and maintenance tax for decisions rooted in legacy constraints. Garbutt calls for coordinated community action to drop these obligations and shrink the default cost of a JavaScript dependency tree.

Read →

PBX Science

Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

Ubuntu 26.04 LTS will display asterisks as users type their sudo passwords, breaking a convention dating back to 1980 when silent password input was introduced to guard against shoulder surfing. The change is triggered by Ubuntu's adoption of sudo-rs, a Rust-based rewrite of sudo that enables password feedback by default. The shift reflects an updated threat model — since most users' sudo and login passwords are identical, and the login screen already shows dots — and can be reverted with a single sudoers config line for those who prefer the classic behavior.

Read →