GitHub vs Rivet
Side-by-side trajectory, velocity, and editorial themes.
GitHub tightens enterprise control over Copilot while hardening the npm supply chain
GitHub's changelog has split into two clear tracks: making Copilot governable at enterprise scale, and locking down the software supply chain. Recent releases add MDM-delivered Copilot settings, mandated OpenTelemetry export, and new adoption-phase metrics in the usage API — the machinery large orgs need to deploy and audit AI coding across a fleet. In parallel, npm v12, innersource advisories, and signed JDK downloads push provenance and access control deeper into the everyday toolchain.
The direction is GitHub-as-control-plane: Copilot is being wrapped in the same admin, telemetry, and policy surfaces enterprises already expect from managed software. Supply-chain security is moving from opt-in feature to default posture, with npm's install-time defaults now on for everyone. Expect these two threads to converge — governed AI agents operating inside a hardened, auditable supply chain.
Look for more Copilot fleet-management controls (policy-as-code, usage and cost guardrails) and continued tightening of npm and Actions provenance defaults over the next few releases.
Rivet pivots from actor backend to a coding-agent OS, and is building the ecosystem to match.
Rivet began as an actor and serverless backend platform — RivetKit, Rivet Actors, Rivet Compute — and has spent the last month reorienting around agentOS, a WebAssembly-based Linux environment for running coding agents without a heavy sandbox. The June and July releases show both threads running in parallel: native language SDKs (Rust, Effect) for Actors, and a fast-maturing agentOS that now has its own package registry.
The center of gravity is shifting from hosting stateful actors to being the runtime coding agents execute inside. agentOS went from a v0.2 sandbox alternative to shipping a package registry and a sub-millisecond package manager in under two weeks, a sign Rivet wants to own the developer surface around agent execution, not just the compute underneath it.
Expect agentOS to keep accreting ecosystem pieces — more registry content and tighter orchestration — while the Actors SDKs settle toward maintenance. A likely next move is deeper coupling between agentOS and Rivet Compute so agents run on Rivet's own cloud.
See more alternatives to GitHub →
See more alternatives to Rivet →