Skip to main content
Scour
Discover
Docs
Login
Sign Up
Discover
About
Docs
Changelog
You are offline. Trying to reconnect...
Copied to clipboard
Unable to share or copy to clipboard
Package Managers
📦 Package Managers
Dependency Resolution, Cargo, NPM, Version Management
Filter Results
Timeframe
Choose a timeframe
Fresh
Past Hour
Today
This Week
This Month
Feeds to Scour
Subscribed
All
Scoured
222
posts in
32.9
ms
📦
Dependency Confusion
DEV Community
·
3d
3 days ago
Semantic
Versioning
and Security — Why Your Version Ranges Could Be a Risk
Discussed on
DEV
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Semantic Versioning and Security — Why Your Version Ranges Could Be a Risk
🦀
Rust
GitHub
·
18h
18 hours ago
Cargo-Geiger
Discussed on
Hacker News
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Cargo-Geiger
🔐
Supply Chain Security
doi.org
·
2d
2 days ago
Beyond SLSA: How to Stop Zero-Click CI/CD Worms with a 9-Step Plan
Discussed on
DEV
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Beyond SLSA: How to Stop Zero-Click CI/CD Worms with a 9-Step Plan
🐙
GitHub
shiplog.arksoft.xyz
·
18h
18 hours ago
I built a service that turns GitHub PRs to customer readable changelogs
Discussed on
DEV
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for I built a service that turns GitHub PRs to customer readable changelogs
🤠
Dallas | Fort Worth
CultureMap Dallas
·
2d
2 days ago
Beloved Dallas public relations
maven
Kelly Hunter dies at 58
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Beloved Dallas public relations maven Kelly Hunter dies at 58
🛠️
Dev Tools
sonatype.com
·
4d
4 days ago
Maven
Central limits publishing
packages
Covers
Maven Central publishing limits
Covered by
3 sources
See all sources covering this story
including
Malware Analysis, News and Indicators
,
central.sonatype.org
Discussed on
Hacker News
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Maven Central limits publishing packages
📦
Dependency Confusion
itsecuritynews.info
·
3d
3 days ago
144 Mastra
npm
packages
compromised in major software supply chain attack
Discussed on
DEV
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for 144 Mastra npm packages compromised in major software supply chain attack
👨💻
AI Coding
GitHub
·
1d
1 day ago
One command for 13 AI coding-assistant context files
Covers
3 stories
See all stories this covers
including
Model Context Protocol And OAuth
Discussed on
DEV
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for One command for 13 AI coding-assistant context files
📦
Dependency Confusion
microsoft.com
·
3d
3 days ago
From
package
to postinstall payload: Inside the Mastra
npm
supply chain compromise
Covered by
4 sources
See all sources covering this story
including
BleepingComputer
,
Malware Analysis, News and Indicators
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for From package to postinstall payload: Inside the Mastra npm supply chain compromise
🚀
Space Exploration
FT Alphaville
·
1d
1 day ago
Building castles in the sky, one new share at a time
Covers
3 stories
See all stories this covers
including
Exclusive: OpenAI Losses Increased Nearly 8X in 2025, With Spending Hitting $34 Billion
Discussed on
Substack
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Building castles in the sky, one new share at a time
👨💻
AI Coding
microservices.sh
·
4d
4 days ago
AI doesn't write bad code. It writes plausible code — so I tried to break my own AI-built app
Discussed on
DEV
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for AI doesn't write bad code. It writes plausible code — so I tried to break my own AI-built app
🚂
trains
DEV Community
·
1d
1 day ago
pnpm
workspaces in a monorepo: the setup that survived CI on Railway and the problems the docs don't warn you about
Discussed on
DEV
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for pnpm workspaces in a monorepo: the setup that survived CI on Railway and the problems the docs don't warn you about
🏗️
Software Architecture
jungroom.com
·
22h
22 hours ago
AI memory should be a product state, not a prompt trick
Discussed on
DEV
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for AI memory should be a product state, not a prompt trick
🔓
Vulnerability Research
roman.pt
·
6d
6 days ago
A backdoor in a LinkedIn job offer
Covers
Pi.dev: There are many coding agents, but this one is mine
Covered by
7 sources
See all sources covering this story
including
JavaScript Development Space
,
lemmy.world
Discussed on
Hacker News
and
Lobsters
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for A backdoor in a LinkedIn job offer
📦
Dependency Confusion
devblogs.microsoft.com
·
2d
2 days ago
Announcing TypeScript 7.0 RC
Covered by
heise online
,
sergeytihon.com
Discussed on
r/javascript
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Announcing TypeScript 7.0 RC
🗺️
Worldbuilding
sixthtone.com
·
3d
3 days ago
String Theory:
Yarn
Crafts Find a New Generation in China
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for String Theory: Yarn Crafts Find a New Generation in China
🏛️
Philosophy
fastcompany.com
·
2d
2 days ago
Cameron Stanley is pushing the Pentagon to become AI-first
Covered by
Mother Jones
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Cameron Stanley is pushing the Pentagon to become AI-first
📦
uv
youtube.com
Content type:
Video
·
4d
4 days ago
Build Your First AI Agent in Python (Step by Step)
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Build Your First AI Agent in Python (Step by Step)
💱
Forex
GitHub
·
15h
15 hours ago
voelspriet/aiwhisperer: DPG Campus Tool. Shrink massive PDFs to fit AI upload limits. Sanitize before uploading to reduce risk of exposing sensitive da...
Covers
SpaCy – Industrial-Strength Natural Language Processing in Python
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for voelspriet/aiwhisperer: DPG Campus Tool. Shrink massive PDFs to fit AI upload limits. Sanitize before uploading to reduce risk of exposing sensitive da...
🏛
Sovereign AI Infrastructure
TNW | Artificial-Intelligence
·
2d
2 days ago
While Helsing and Anduril chase billion-dollar valuations, Comand AI raised €32M for the layer above them
Love
Like
Not for me
Save
Add to your feed
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for While Helsing and Anduril chase billion-dollar valuations, Comand AI raised €32M for the layer above them
Page 2 »
Log in to enable infinite scrolling
Keyboard Shortcuts
Navigation
Next / previous post
j
/
k
Open post
o
or
Enter
Preview post
v
Post Actions
Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s
Recommendations
Add interest / feed
Enter
Not interested
x
Go to
Home
g
h
Interests
g
i
Feeds
g
f
Likes
g
l
History
g
y
Changelog
g
c
Settings
g
s
Discover
g
b
Search
/
Pagination
Next page
n
Previous page
p
General
Show this help
?
Submit feedback
!
Close modal / unfocus
Esc
Press
?
anytime to show this help
Like
Save
Not for me
Report