Price:

AI & TECH

Nostr's Git Workshop builds a decentralized alternative to GitHub

Saturday, May 9, 2026 · from 3 podcasts
  • Git Workshop now merges pull requests over Nostr, using decentralized Grasp servers and NIP-34 for issue tracking.
  • Developers use it as a hedge against GitHub downtime, though they lack CI pipelines and mobile support.
  • The open-source ethos of projects like FFmpeg mirrors Nostr's push for a meritocratic, corporate-resistant infrastructure.

The fight for the future of software development is moving beyond corporate platforms. On Nostr, Git Workshop’s latest update introduces direct pull request merging through decentralized Grasp servers, which recognize Nostr identities for repository access.

This isn’t a hobbyist project. Host Max on Nostr Compass reports the web interface is now snappy enough for daily use, and a developer used an AI agent to set up a static site project via the ngit CLI in one shot. The system uses encrypted NSEC notifications and NIP-51 lists for starring repos, handling the social layer of coding while keeping Git history portable.

The push for decentralized tools mirrors a decades-old ethos in critical open-source infrastructure. On the Lex Fridman Podcast, FFmpeg contributor Kieran Kunhya detailed why the video codec library remains 79.9% hand-written assembly - a choice made because compilers still can’t match human optimization for saving CPU cycles at global scale.

“The core of the internet's video infrastructure is managed by fewer than 20 people. In a community of thousands of contributors, the 'nobody cares if you're a dog' rule applies.”

- Kieran Kunhya, Lex Fridman Podcast

That meritocratic standard, where code quality trumps corporate pedigree, is the model Nostr’s developer community is trying to replicate. VLC’s Jean-Baptiste Kempf turned down eight-figure acquisition offers to protect the project from corporate capture, a stance that required years of administrative work to change licenses for 350 contributors.

Resistance to centralized control is also a security posture. On Ungovernable Misfits, hosts Q and Max Tannehill dismissed a recent DOJ promise to spare open-source developers as a hollow trap, noting prosecutions against Samourai Wallet and Tornado Cash’s Roman Storm continue. They argue the legal ‘knowing’ standard makes developers liable the moment they learn of any illicit use.

This legal pressure makes decentralized, censorship-resistant infrastructure not just idealistic but necessary. While Git Workshop still lacks continuous integration pipelines and mobile apps, its existence provides a functional alternative. As one Nostr Compass guest noted, it’s a hedge against GitHub’s frequent downtime and centralized control.

“The system is now snappy enough for daily use, even if it lacks the continuous integration pipelines found in GitHub.”

- Max, Nostr Compass

The parallel movements - Nostr’s push for decentralized tools and the old guard’s defense of open-source integrity - share a core belief: the infrastructure of the digital world should not belong to a few platforms. Whether it’s 6.5 billion VLC downloads or a nascent Git merge over Nostr, the goal is the same: software that serves users, not shareholders.

Source Intelligence

- Deep dive into what was said in the episodes

Nostr Compass Podcast #20May 8

  • Git Workshop's web interface allows direct merging of pull requests, integrates NIP51 lists for starring repos, and uses encrypted NSEC notifications.
  • Git over Nostr via ngit works for basic publication, but lacks CI/CD and mobile apps, making it unsuitable for production systems requiring low change costs.
  • RoutesterD enables automatic discovery of LLM service providers via Nostr Kind 38421 announcements and includes a Cashew wallet for Lightning payments.
  • Hazard proposes providers advertising the same model could be tested by sending identical prompts and comparing outputs to catch bad actors.
  • Wisp 1.0.0 introduces normie mode for fiat-denominated zaps, supports NIP65 relay lists, and is now available on iOS and Android Play Stores.
  • Applesauce 6.0.0's new jQuery-like event creation system improved agent compatibility, and its relay request logic races relays to avoid dead relay timeouts.
  • April 2023 saw major Nostr growth with NPUB BECH32 URIs, NIP45 count, event-specific zaps, custom emojis, and clients like Damus and Snort gaining traction.
  • April 2024 introduced NIP17 for private messaging, early Git over Nostr specs, and OpenSATS began long-term support for developers like Pablo and Hazard.
  • April 2025 deprecated NIP26 delegated signing, added Blossom integration NIPb7, and OpenSATS announced its 11th wave of grants including Sway and Hamster.
  • April 2026 focused on Git over Nostr refinements, migrating profile badges to Kind 30008, and the 16th OpenSATS grant wave funding Amethyst Desktop and NullNostr.
Also from this episode: (7)

AI Infrastructure (3)

  • Grain relay replaced Mongo with NostrDB for performance gains similar to Stirfry, but lacks negentropy and full-text search, which are on its roadmap.
  • Marmot TS migrated addressable key packages from legacy Kind 443 to 30,443 to simplify SDK APIs and pave the way for multi-device support.
  • Max argues specialized Nostr apps should avoid Kind 1 posts to prevent UX confusion, favoring NIP22 for comments over Twitter-style integration.

Custody (1)

  • MostrO now separates long-term identity from per-trade identity using NIP59 dual key gift wrap to prevent observer correlation across multiple trades.

Startups (1)

  • Crux Coach uses Nostr to publish climbing routes for Kilter boards, supports Amber login and encrypted backups via Blossom servers.

Coding (1)

  • Amethyst is building a Kotlin-based MediaOverQUIC stack for voice/video calls and migrated Schnorr verification to a standalone libsnorr256k1 repository.

Privacy (1)

  • Cleve uses Apple push notifications to wake iOS apps for NIP-46 signing, trading privacy for battery efficiency since the developer knows signing times.

#496 – FFmpeg: The Incredible Technology Behind Video on the InternetMay 6

  • Karen criticizes Google security engineers for using AI to find open-source vulnerabilities, publicizing them before fixes, and offering limited funding, noting verbose reports on niche codecs. Microsoft Teams also requested urgent support from FFmpeg volunteers and offered minimal compensation.
Also from this episode: (13)

Open Source (6)

  • FFmpeg prioritizes excellent code quality and contributors' technical skill over their background or institutional affiliation, fostering a diverse community.
  • VLC, an open-source media player, has been downloaded over 6.5 billion times and can play virtually any media format across any operating system without ads or tracking. Jean Baptiste Kemp states it can even record VHS tapes via capture cards and supports DVD audio.
  • Both FFmpeg and VLC are engineered to handle broken or untrusted files, a philosophical approach rooted in VLC's origin streaming damaged UDP network data. They discard file extensions and analyze content directly.
  • Jean Baptiste Kemp changed VLC's core from GPL to LGPL to enable commercial integration, like in game engines, without forcing open-source for the entire product. This required contacting over 350 contributors for their agreement.
  • Jean Baptiste Kemp refused "dozens of millions of dollars" in offers to monetize VLC with toolbars or ads, stating it was unethical and would betray the volunteer work and user trust.
  • With 2,000-3,000 past contributors, FFmpeg's small core (10-15 people) and VLC's (five people) emphasize maintainable code and rigorous standards. Jean Baptiste Kemp notes that Linus Torvalds sets a similar high bar for Linux.

Enterprise (1)

  • FFmpeg is a massive global CPU user, running on billions of devices for video decoding (e.g., 30% of Netflix, 50% of YouTube video). Its codebase is 79.9% assembly, 19.6% C, underscoring its low-level optimization.

Media (1)

  • VLC's distinctive traffic cone logo is globally recognized, with 25% of its website traffic searching for "cone player." An April Fool's joke about changing it prompted 10,000 user emails demanding it remain.

AI Infrastructure (4)

  • Karen explains that up to 45% of video files are not GPU-decodable. Video codecs achieve 100x to 200x compression by removing data imperceptible to humans, mimicking how the eye processes luminance and color (YUV).
  • FFmpeg is the de facto collection of low-level libraries for multimedia processing, including codecs, muxers, demuxers, and filters. It is integrated into almost every video platform, from YouTube to OBS.
  • FFmpeg democratized high-end video processing, shifting it from expensive, car-sized studio equipment to accessible software, thus enabling the YouTube and podcasting revolutions for individuals.
  • FFmpeg is an "excellent school" for programmers, demanding a deep understanding of computer architecture, CPU pipelining, SIMD, and IO for its performance-critical environment. Its review process offers seasoned mentorship.

Big Tech (1)

  • Jean Baptiste Kemp and Karen successfully used "spicy tweets" to pressure large companies like Google and Microsoft, resolving bugs for VLC on Android and Windows Store and increasing FFmpeg donations and awareness.

Verdicts From Vegas | THE BITCOIN BRIEF 80May 6

  • Q and A argues that posturing by the DOJ on not prosecuting open-source developers is meaningless as key figures like himself, William Hill, and Roman Storm remain imprisoned.
  • The SDNY rejected a defense appendix in the Roman Storm trial, arguing it wrongly equates privacy with anonymity and claims a system can be private even if a central authority can access data.
  • Bitcoin 2026 was busier than the prior year despite negative price sentiment. Foundation showcased Passport Prime, and both Zach and Max moderated panels.
  • Max used Foundation's SDK and Claude Opus to build a proof-of-concept offline Nostr signing app and a password manager that works via browser extension with Passport Prime.
  • Block announced BitKey with a screen, priced at $260. It retains a fingerprint reader, which Max criticizes as a physical security risk.
  • Cash App raised its Bitcoin withdrawal limit from $1,000 to $10,000 per day and added features like auto-converting peer-to-peer payments to Bitcoin and a 5% Bitcoin back program with Square merchants.
  • Block reported holding approximately 28,355 Bitcoin, with 19,000 for customers and 9,000 in its corporate treasury, alongside a new NFC tap-to-pay solution for Cash App.
  • Lightspark launched Grid Global Accounts, a payment layer connecting to 175 million Visa merchants across 33 countries, and introduced AI agent delegation for financial tasks.
  • AVEN launched a Bitcoin-backed Visa credit card allowing loans up to $1,000,000 against crypto, with interest starting at 7.99% APR and 2% cash back.
  • Strike unveiled a 'volatility-proof' loan structure with Tether, secured a $2.1 billion credit facility, and cut rates to 7.49% APR, while pursuing a merger to create a publicly listed platform.
  • Paul Sztorc proposed a Bitcoin hard fork called eCash at block 964,000 in August, initially planning to reassign Satoshi's coins to fund it, but later backtracked after pushback.
  • BIP 47 DB is a new decentralized directory using Ordinals inscriptions to store payment codes on-chain, solving the centralization vulnerability exposed when Samourai's PayNym server was seized.