Story broken by New Scientist today, but it’s been in the unofficial rumour mill all week for those working inside NHSE.
Terence Eden has put out a good explanatory blog post
There is an open letter if you feel you would like to sign and share it.
https://keepthingsopen.com/ - 824 signatures so far.
Sadly, I’ve not seen this on social media
The deadline has passed and 378 NHSDigital (sic) repos remain open. I think they waited it out to see what the GDS guidance was, which has come back strongly in favour of keep calm and open source: AI, open code and vulnerability risk in the public sector - GOV.UK
Keep open by default. Making everything private adds additional delivery and policy costs, and can reduce reuse and scrutiny. Openness should remain the default posture, with closure used sparingly and deliberately.
They did close a lot of repos though - I know that Mavis (Manage Vaccinations in Schools) which was a project I was working on has been closed down and public access now returns a 404:
https://github.com/NHSDigital/manage-vaccinations-in-schools
You are correct that subsequent GOV.UK guidance completely contradicted whan NHSE are doing/have done.
This GitHub search of the uk-gov-mirror organisation shows the repos that were open which are now closed.
Ah thanks! That’s a helpful resource, and evidence, if it was needed, that security through obscurity is not only unwise, but also really hard to implement after the fact.
So does that mean that effectively everything in practice remains open source? Is this mirror site being kept in lockstep with the official closed repos or are we in danger of version discrepancies as time goes on?