Analysis of dependency cooldowns as a flawed security practice, arguing they promote free-riding and fail to address supply chain attack root causes.
A guide to creating shell aliases for quickly checking outdated packages on Arch Linux, Debian/Ubuntu, and macOS.
A developer details migrating a multi-service project to a proper monorepo structure using Nx and npm workspaces.
Analyzes PyPI data to see if AI tools have increased software productivity, finding a significant boost in release frequency for new 'AI-native' packages.
Explores using WinGet with Infrastructure as Code (IaC) to automate and standardize Windows software deployments.
A guide for R package maintainers on using a custom JavaScript tool to parse and organize lengthy CRAN reverse dependency check logs into manageable tabs.
A guide on backporting security fixes to older releases in Conda Forge, using a Dask vulnerability patch as a practical example.
ChatGPT's code execution containers now support bash, multiple programming languages, package installation via pip/npm, and file downloads.
A developer explains their shift from Arch Linux's AUR to using Flatpak on Debian, driven by security concerns and system stability.
A guide to securing npm package publishing workflows by eliminating tokens and implementing robust security practices in response to recent incidents.
A guide to automating the publishing of internal .NET NuGet packages using GitHub Actions and GitHub Packages.
The author introduces new GitHub Actions workflows for their Swift Package Scripts project, automating tasks like building, testing, and documentation.
Release notes for sqlite-utils 3.39, featuring bug fixes for plugin installation with uv and new functionality for custom SQL functions.
A comparison of modern Python package managers uv and pixi, exploring their history, differences, and use cases for developers.
A tutorial on creating a Bash script using Awk and fzf to search, install, and remove Arch Linux and AUR packages from the command line.
A developer rewrites their Neovim configuration using the Fennel Lisp language and migrates to the built-in vim.pack package manager.
A guide showing how to check the installed and download size of packages using the Pacman and Apt package managers on Linux.
A critique of JavaScript's dependency management after a major supply-chain attack, arguing for systemic change but predicting stagnation.
Announcing the release of dzPackageInst 1.0.5, a command-line tool for installing Delphi IDE design-time packages.
A guide explaining a workaround method to rollback or downgrade a specific Homebrew package to a previous version.
