After five years as open source champions, Cal.com is going closed source. This wasn’t an easy decision, but in the age of AI-driven security threats, protecting customer data has to come first. Cal.diy will continue as an open option for hobbyists.
im very confused, can any developers comment?
isnt this literally the reason to be open source? that vulnerabilities can be scanned and fixed publicly.
that there is now tooling that can lightspeed accelerate the detection of bugs shouldnt change that fact… or am i missing something?
Cal.com hasn’t been truly open source for awhile despite the marketing. Just the barest minimum of the app is open source. I imagine this is a way to absolve themselves of maintenance responsibility on the public repo.
AI being used to scan for vulnerabilities should not make a difference. The same AI that black hatters can use can be used bobwhite hat security.
Sure, it makes finding vulnerabilities easier in the short term but the concept of open source makes vulnerabilities less likely in the long term.
This is a bad call which will likely be damaging for them and for the community.
Ah yes, security through obscurity. Great security pattern.
