OSSmitchellh/vouch — AI PR Spam Defense for Open SourceGitHub·high signalXBlueskyLinkedInCopy linkMitchell Hashimoto (HashiCorp founder). Community trust management blocking low-effort AI PRs. GitHub Actions auto-close from unknown accounts. Federated vouch lists. 2.8K stars.SourceSource pageGitHub↳ Follow the threadStack layer / Threat patternCline Leaves the IDE: a Standalone Desktop Agent That Imports Claude Code and Codex Sessions and Schedules Recurring PR ReviewsCline GitHub releases (launch reported by RuntimeWire, version cadence verified on the repo)Policy dependency / Stack layerA Bun packaging quirk left a vulnerable undici in Cline after the CVE was supposedly remediatedGitHubStack layer / Threat patternClaude Code fixed `/resume` and `/teleport` letting Claude edit files the resumed conversation never readClaude Code ChangelogStack layer / ContrastTencent Cloud's CubeSandbox is a 12,497-star Go agent sandbox that does not carry a recognized open source licenseGitHub TrendingStack layer / Update threadAgentic Awesome Skills shipped v17.3.0 this morning with 2,122 skills and zero open issuesGitHubStack layer / ContrastPonytail v4.10.0 adds native Cursor support through hooks.json and a Grok Build skills adapterGitHubStack layer / Update threadCline's catalog refresh moves 44 providers' default model, most of them onto DeepSeek V4.1 FlashGitHubStack layer / Update threadCline's checkpoints re-hashed every untracked file before each model call, blocking messages for minutes on large workspacesGitHub