When will we learn?
Article critiques modern package managers (npm, Cargo, PyPI) for supply-chain attacks and advocates for distribution-based package management.
Article critiques modern package managers (npm, Cargo, PyPI) for supply-chain attacks and advocates for distribution-based package management.
Explains how to use Directory.Packages.props to centrally manage NuGet package versions across multiple projects in a .NET solution.
A developer shares the process of creating and distributing a Lua package using LuaRocks, despite the package being unfinished and having quirks.
A guide on using Azure Artifacts for managing, hosting, and sharing NuGet, npm, and Maven packages within Azure DevOps.
A critique of Python's chaotic packaging ecosystem and its negative impact on Linux distribution maintainers, calling for the PSF to address the issue.
Argues that developers should rely on third-party software distributions to package their software, rather than distributing it themselves.
Introduces haskell-docs-cli, a terminal tool for quickly searching Haskell package documentation and source code without leaving the editor.
Explains a trick to reliably get a Node.js package's root directory by resolving its package.json file.
Critique of npm audit's flaws, arguing its default rollout was rushed and harmful to front-end development workflows.
Explains how to validate Go module paths using the golang.org/x/mod/ package's CheckPath function.
Critique of Semantic Versioning's practical limitations and why it can't guarantee API stability, using real-world examples like the cryptography package.
A beginner's guide to creating and managing Python virtual environments using pyenv and virtualenv to isolate project dependencies.
A beginner's guide to Go (Golang) covering installation, syntax basics, package management, and writing your first program.
Explains why Go prohibits import cycles, how they occur, and strategies for resolving these circular dependency errors in your code.
A critical analysis of pkg.go.dev's engineering flaws, its centralized design, and Google's approach to open source and privacy in the Go ecosystem.
Analyzes the new Sdkbin platform for sustainable OSS in .NET and why any NuGet marketplace must compete with NuGet.org.
A technical guide to fixing a known issue where GHC 8.8.3 cannot find packages installed by Cabal 3.0.0.0, with a manual workaround.
An introduction to Helm, the package manager for Kubernetes, explaining its purpose, basic commands, and how it simplifies deploying applications.
A guide on using npm link to streamline local development when working across multiple interdependent npm packages.
A beginner's guide to using npm for managing Node.js packages, covering installation, project setup, and dependency management.