📦 Package Managers - estaugaard · Scour

Aube: A New Dawn for Node Installs

🧊Immutable Linux Blog

The runtime-portable TypeScript framework with supply-chain-aware defaults

daloyjs.dev··DEV

Scarab Field Test #021 — pnpm Self-Upgrade No-Manifest Boundary

📡Local-First Software Code

github.com··DEV

someone actually leaked the Miasma supply chain attack toolkit source code on github

🧊Immutable Linux

safedep.io··Hacker News, r/programming

Field Test #020b — Next.js Root Ownership Refinement

🧊Immutable Linux Blog

A zero-dependency way to generate fantasy character names in Python

pypi.org··DEV

Vulnerability and malware checks in uv

🛡️Memory Safety Blog

astral.sh··Lobsters, Hacker News, Hacker News

Why Developer Onboarding Should Be Contract-First

❄️Nix Flakes Blog

From a Flask Surprise to a PyPI Package: How I Built pipulse

❄️Nix Flakes Blog

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

❄️Nix Flakes

thehackernews.com··r/programming

your AI coding agent keeps re-making the bug you already fixed. here's the fix.

🌀Helix Code

github.com··DEV

The Chameleon Edition

📡Local-First Software

End-to-End GitHub Security Hardening Guide for Organizations

🌐Indie Web Blog

What I got wrong about fast terminals

💻Terminal Emulators Blog

mijndertstuij.nl··Lobsters, Hacker News

How a Fake Job-Interview Repo Tried to Steal My Keys (and How I Caught It)

❄️Nix Flakes Blog

Forms of Open Source Government

🕸️Decentralization Blog

nesbitt.io··Lobsters

Introduction - Rust for Python Programmers

microsoft.github.io··Hacker News

For the 2nd time in weeks, Microsoft packages laced with credential stealer

❄️Nix Flakes News

arstechnica.com··Lobsters, Hacker News

Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.

❄️Nix Flakes Blog

Less-relevant results

May 2026

forgejo.org··Lobsters

Log in to enable infinite scrolling