Submissions from nesbitt.io

		Unfinished Work in Package Security (nesbitt.io)
		2 points by lumpa 3 days ago \| past \| discuss
		Package Manager Threat Model, Revisited (nesbitt.io)
		2 points by lumpa 3 days ago \| past \| discuss
		Good Morning, Your Toaster Is Compromised (nesbitt.io)
		3 points by torgeros 8 days ago \| past \| 1 comment
		Git Submodules as a Package Manager (nesbitt.io)
		91 points by ErenayDev 24 days ago \| past \| 33 comments
		Now Hiring: Senior Open Source Maintainer (nesbitt.io)
		6 points by rapnie 27 days ago \| past
		Now Hiring: Senior Open Source Maintainer (nesbitt.io)
		2 points by metrofun 27 days ago \| past
		Now Hiring: Senior Open Source Maintainer (nesbitt.io)
		9 points by pimterry 28 days ago \| past \| 2 comments
		Issues in the Repo (nesbitt.io)
		2 points by jamietanna 36 days ago \| past
		Weekend at Bernie's (nesbitt.io)
		2 points by zbentley 44 days ago \| past
		A year of AI disclosure in critical packages (nesbitt.io)
		2 points by omkar-foss 50 days ago \| past
		Why NPM Dependency Trees Are So Big (nesbitt.io)
		2 points by type0 56 days ago \| past
		Interview with a Maintainer (nesbitt.io)
		23 points by ryangibb 63 days ago \| past \| 9 comments
		What happened to the tea.xyz spam wave (nesbitt.io)
		6 points by jcbhmr 63 days ago \| past
		Package Name Prefixes (nesbitt.io)
		3 points by ErenayDev 64 days ago \| past
		--end-of-options (git flag) (nesbitt.io)
		4 points by latexr 65 days ago \| past
		git's –end-of-options Flag (nesbitt.io)
		184 points by ErenayDev 66 days ago \| past \| 121 comments
		Plumbing Homebrew into the Vulnerability Ecosystem (nesbitt.io)
		4 points by zdw 68 days ago \| past
		Plumbing Homebrew into the Vulnerability Ecosystem (nesbitt.io)
		1 point by chmaynard 69 days ago \| past
		Madame Semver Will See You Now (nesbitt.io)
		1 point by progbits 74 days ago \| past \| 1 comment
		Package Management as Org Chart (nesbitt.io)
		5 points by birdculture 75 days ago \| past
		Madame Semver Will See You Now (nesbitt.io)
		3 points by birdculture 75 days ago \| past
		Package Management as Org Chart (nesbitt.io)
		3 points by zaik 76 days ago \| past
		Incident CVE-2026-LGTM (nesbitt.io)
		598 points by mooreds 3 months ago \| past \| 93 comments
		Scrutineer: Scanning open source without flooding maintainers (nesbitt.io)
		2 points by chmaynard 3 months ago \| past
		Sunsetting a Package Manager (nesbitt.io)
		1 point by chmaynard 3 months ago \| past
		Signing Is for the Bad Days (nesbitt.io)
		3 points by cold_pizz4 3 months ago \| past \| 1 comment
		Open Source vs. the Invisible Hand (nesbitt.io)
		2 points by zdw 3 months ago \| past
		How Open Source Projects Change Hands (nesbitt.io)
		3 points by chmaynard 3 months ago \| past
		Joint Guidance on Vulnerability Naming and Disclosure (nesbitt.io)
		1 point by phoronixrly 3 months ago \| past
		What Happened to Tea.xyz (nesbitt.io)
		6 points by yla92 3 months ago \| past
		More