April 2026 Summaries

The OSSCAR Index addresses the challenge of ranking open-source projects by focusing on growth rather than size, using a transparent methodology based on new GitHub stars, unique contributors, and package downloads from npm, PyPI, and Cargo. Released quarterly, the index ranks projects within two divisions—Emerging and Scaling—based on their growth rate, enabling fair comparisons across different scales of organizations. The Q1 2026 results highlighted the significant growth of projects like Openclaw and the dominance of AI-related initiatives in the Emerging division. The methodology is designed to be global, avoiding biases towards Western-centric data sources, and encourages community feedback and contributions through its open-source platform. By providing visibility into rapidly growing projects, the OSSCAR Index aims to facilitate discovery, collaboration, and the overall health of the open-source ecosystem.

Supabase has achieved ISO/IEC 27001:2022 certification, which validates the company's information security management system across its entire platform, including Database, Auth, Storage, Realtime, Edge Functions, and the Data API. ISO/IEC 27001:2022 is an international standard for information security management systems (ISMS), involving a collection of policies, processes, and controls to manage information risk. The certification process is conducted by a third-party auditor and ensures that these systems are maintained continuously, with annual surveillance audits and a three-year validity for the certificate. This certification aligns closely with SOC 2 standards, which also evaluate data protection measures such as access controls and incident response. The audit process involves reviewing documentation and testing system controls, and for Supabase, much of the evidence required overlapped with their existing SOC 2 compliance. Teams on Supabase's Team or Enterprise plans can request the ISO 27001 certificate, which may facilitate vendor reviews and unblock certain projects. Supabase also supports SOC 2 and HIPAA compliance, indicating a commitment to a comprehensive security and compliance framework.

In December 2025, Supabase announced a collaboration with Stripe, integrating the Stripe Sync Engine into the Supabase dashboard, which enabled reliable and scalable ingestion of existing Stripe data into Postgres. This integration resulted from Stripe's advancements in automatic, incremental backfilling using Supabase Cron and Queue. The partnership has led to a more stable and capable integration, with ongoing improvements in reliability and expanded Stripe object support. The recent transfer of the open-source Stripe Sync Engine repo to GitHub under Stripe's management signifies continued joint development efforts. New features include the ability to sync coupons, support for branching, and immediate data syncing upon installation. Enhancements in management and user experience include one-click upgrades, SSL enforcement, better error messaging, and improved install flow, with admin-only controls to prevent partial installations. This collaboration embodies Supabase's ethos of open development and community support, aiming to provide superior technology for developers.

In December 2025, a collaboration between Supabase and Stripe led to the integration of the Stripe Sync Engine into the Supabase dashboard, enabling the reliable and scalable ingestion of Stripe data into Postgres. This partnership, which began with the joint development of automatic, incremental data backfilling using Supabase Cron and Queue, has resulted in a more robust integration through continuous iterations on reliability and expanded support for Stripe objects. The Stripe Sync Engine remains open source, and its repository has been moved to "stripe/sync-engine," with all future updates being made there. The latest release introduces enhancements including immediate data syncing upon installation, branching support for safer development workflows, and improvements in reliability and user experience, such as clearer error messages and smarter installation processes. Supabase's commitment to open development and collaboration with companies like Stripe underscores its dedication to providing advanced technological solutions for developers.

The text discusses a skill designed to aid agents in using Supabase effectively by focusing on documentation access, security, tooling workflow, and schema management. It emphasizes the importance of checking current documentation before implementation, as Supabase's configurations and APIs frequently change. The skill includes a built-in checklist for security requirements and discourages using the Supabase MCP server with production databases, recommending local or staging databases instead. It highlights that agents often rely on outdated training data, underscoring the necessity of accessing up-to-date documentation and providing tools like the MCP server and CLI for schema management. Testing showed that using the skill improved performance across different agent models, indicating that the bottleneck is often context rather than capability. The skill is designed to be maintainable by teaching agents how to find information rather than including the information itself, and it encourages an opinionated approach to schema management to avoid unnecessary migrations. The document concludes with insights gained from testing and suggestions for developing similar skills, such as starting simple and expanding based on evaluation results and community feedback.

Supabase Auth now supports the integration of custom OpenID Connect (OIDC) providers, allowing users to authenticate through identity providers not covered by the over 20 built-in social providers like Google or GitHub. This feature enables organizations to incorporate regional or self-hosted identity solutions, ensuring compliance and meeting specific needs. Once a custom provider is set up, the authentication process for users remains consistent with built-in providers, as the Supabase auth server manages the complete OAuth flow, including token exchanges and user profile fetching. The setup involves supplying the provider's issuer URL, client credentials, and scopes, with Supabase automatically handling the discovery of necessary endpoints and JSON Web Key Sets (JWKS). Additionally, Proof Key for Code Exchange (PKCE) is enabled by default to enhance security, and configurations can accommodate multiple platforms and providers that do not return email addresses. Users can create and manage custom providers through the Supabase Dashboard or the auth Admin API, with up to three custom providers per project, and further support available if needed.

Supabase, an open-source project that started in 2020 with just two founders and a Postgres database, has grown into a community of eight million developers, achieving 100,000 GitHub stars. The founders emphasize that their focus has always been on creating a positive experience for developers, with stars being a byproduct of that mission. Supabase prides itself on supporting existing tools and communities, functioning as a "community of communities" by collaborating with open-source projects like Postgres, PostgREST, pgvector, Deno, imgproxy, and the Elixir Phoenix Framework. The team continues to advocate for Postgres as the default database for new internet projects, aiming to enhance its scalability and storage capabilities while fostering innovation through their collaborative and supportive approach.

Coding agents often struggle without access to the latest documentation, leading to incorrect recommendations and commands. To address this, a solution is proposed where agents use bash to access up-to-date Supabase documentation, allowing them to explore files interactively rather than relying solely on search queries. By integrating tools like "grep," "find," and "cat," agents can navigate documentation files more intuitively, similar to browsing a file system. This approach contrasts with traditional search methods, which limit agents to predefined queries and static results. The experiment is open-source, providing the community with the opportunity to contribute and offer feedback through platforms like GitHub.