PUB: Agentic Maintainers for the World's Most Critical Software
PUB (Prosperous Universal Backports) is a proposal to fork the most important open source packages that the world's economy runs on, maintain them with agents, and serve them through a drop-in registry mirror. When a critical vulnerability lands, every widely used package version should be patched in hours, not whenever an unpaid volunteer gets to it. This post covers how we would pick which packages and versions to fork, what an agent is allowed to ship on its own, and why this has to be a public commons rather than another security product.


