A report this week from Hacker News covered the launch of Tangled, a federated code forge described at tangled.org as an alternative to centralized repository hosts like GitHub, which is owned by Microsoft. The platform operates on a federated model, meaning repositories and user identities can be hosted across many independent servers that communicate with one another rather than routing everything through a single corporate-controlled node.
Tangled is built on the AT Protocol — the same underlying specification that powers the Bluesky social network — allowing code repositories, issues, and pull requests to be associated with portable decentralized identifiers rather than accounts tied to a specific company's platform. The project is open source and positions itself explicitly against the concentration risk inherent in a world where the vast majority of open-source software development flows through a single commercial host.
GitHub currently reports more than 100 million registered users and hosts hundreds of millions of repositories. That scale also means that GitHub outages, policy changes, or access restrictions have repeatedly disrupted software development pipelines worldwide — including a notable 2023 incident in which AI-training-related repository takedowns raised questions about whose code is actually whose under a centralized model.
The preparedness angle that general tech coverage won't surface: the software supply chain is now critical infrastructure for nearly everything physical. Embedded firmware in water treatment controllers, open-source code running grid management tools, and the libraries inside medical device software are all predominantly hosted on centralized forges. A sustained outage, a government-compelled takedown, or an acquisition-driven policy shift at a single company can halt the patch cycle for vulnerabilities in systems that have nothing to do with software development as most people understand it. Federated alternatives like Tangled don't eliminate that risk, but they introduce the kind of redundancy that resilience-minded engineers have been asking for — the same logic that makes a distributed power grid harder to take down than a single large plant.
Tangled is in early availability as of late October 2026, and adoption will determine whether the federated model gains the network density needed to be a genuine alternative rather than an enthusiast project. The Hacker News thread drew substantial discussion about protocol maturity and whether AT Protocol's current feature set is sufficient for professional development workflows.
