When Microsoft announced its $7.5 billion acquisition of GitHub in 2018, developers were skeptical. Some worried about Microsoft's control over the open-source platform, while others adopted a wait-and-see approach. Nearly eight years later, GitHub finds itself fighting for survival amid a surge of outages, security vulnerabilities, and intense pressure from competitors.

In recent weeks alone, GitHub experienced multiple major outages, a remote code execution vulnerability disclosure, and a breach of its internal code repositories after an employee installed a malicious VS Code extension. Conversations with current and former GitHub employees reveal a company struggling with leadership voids and competitive threats.

Leadership vacuum and talent exodus

The roots of GitHub's current troubles trace back to last summer, when former CEO Thomas Dohmke resigned. Microsoft chose not to replace him, instead having GitHub's leadership report directly to the CoreAI team, led by former Meta engineering chief Jay Parikh. This restructuring alienated many Hubbers, as GitHub employees call themselves, who valued their independence.

Parikh is reportedly unpopular within Microsoft, and his decision to leave the CEO position vacant has been criticized. Since Dohmke's departure, a talent drain has accelerated. At least 11 former GitHub employees have joined Dohmke's new startup, Entire, a developer platform that directly competes with GitHub. Other executives have also left: Julia Liuson, a 34-year Microsoft veteran, resigned; Jared Palmer, who joined GitHub in October, left after just months for a role at Xbox; and Elizabeth Pemmerl, GitHub's chief revenue officer, also stepped down.

One employee lamented, "There's basically no more GitHub at all anymore. It's all Microsoft, and the company is collapsing, both in outages that are really bad and have torched the company reputation... and in an exodus of leadership."

Operational failures and security breaches

The outages have been particularly damaging. GitHub CTO Vladimir Fedorov, who joined a year ago, apologized for recent incidents, citing a huge growth spike in pull requests, commits, and new repositories. He promised to prioritize availability over new features. However, the outages come amid a complex migration to Azure servers, which Fedorov initiated to address data center capacity issues. The migration has introduced new risks, and developers have voiced frustration. Ghostty terminal developer Mitchell Hashimoto announced he was leaving GitHub after 18 years, saying, "GitHub is failing me, every single day."

Security issues have also mounted. In March, Wiz Research used AI models to uncover a critical vulnerability in GitHub's internal git infrastructure that could have exposed millions of code repositories. GitHub rushed to fix it in under six hours. Earlier this week, 3,800 internal repositories were breached after an employee installed a malicious VS Code extension, highlighting ongoing security gaps.

Competition and pricing backlash

While GitHub Copilot initially led the AI coding assistant market, it has fallen behind rivals like Cursor and Claude Code. Parikh has privately warned that GitHub "faces a critical threat." Microsoft reportedly considered acquiring Cursor to close the gap and has canceled many Claude Code licenses to force developers to use Copilot.

GitHub also faces backlash over its shift to usage-based billing for Copilot. Starting next month, users will have monthly credits; once exhausted, they must pay for more. Developers accustomed to unlimited experimentation now face potential cutoffs.

Meanwhile, upstarts like Entire, led by Dohmke, are positioning themselves as alternatives. The pressure is on Parikh and CoreAI to stabilize GitHub and fend off competitors before the platform loses the developer trust that made it the cornerstone of open-source collaboration.

Other Microsoft news

• Microsoft retires Teams' Together Mode. As businesses return to offices, Microsoft is removing the virtual conference room feature to focus on improving video quality and stability.
• Xbox rebrands to all caps: XBOX. After a poll on X, CEO Asha Sharma made the change. The original Xbox logo used all caps, returning to that style.
• Windows 11 tests adjustable taskbar and resizable Start menu. Users will soon be able to reposition the taskbar and resize the Start menu, addressing long-standing complaints since Windows 11 launched in 2021.
• Leaked images show new Xbox Elite 3 and Cloud Gaming controllers. A cloud controller with Wi-Fi direct connection and an Elite 3 with scroll wheels and removable battery were accidentally revealed by Brazil's Anatel regulator.
• Former Microsoft Developer Division chief S. "Soma" Somasegar dies at 59. His death shocked the tech community. Satya Nadella called the loss "very personal."
• Xbox fans demand exclusives, more backward compatibility, and free online multiplayer. Microsoft's new Player Voice portal gathered feedback; it remains to be seen how the company will respond.
• Microsoft launches Surface Pro 12 and Surface Laptop 8 with Intel chips. New business-oriented devices start at $1,949.99, nearly double previous models.
• Xbox hires game industry analyst Matthew Ball as chief strategy officer. He joins alongside new CTO Scott Van Vliet and promoted executive Chris Schnakenberg.
• Logitech's MX Master 4 supports Windows 11's Advanced Haptics. Firmware updates bring haptic feedback for snapping windows and aligning objects.
• Microsoft phases out SMS codes for personal accounts. The company moves to passkeys for two-factor authentication, citing vulnerability to phishing.
• Microsoft appoints Jon Friedman as first chief design officer. Friedman reflects on the need for a design leader to integrate AI thoughtfully across products.

Microsoft's challenges with GitHub and its broader ecosystem highlight the difficulty of balancing innovation, security, and user trust. The next few months will be critical for Parikh and the CoreAI team as they work to stabilize GitHub and retain developers who are increasingly exploring alternatives.

Source: The Verge News