Standard Search

https://nesbitt.io/2026/05/22/dependency-pruning.html · 22 May 2026

A survey of unused-dependency detectors

supply-chain dependencies package-managers

https://nesbitt.io/2026/05/15/language-registries-are-unstable-by-default.html · 15 May 2026

apt install -t unstable, but make it your whole personality

package-managers security supply-chain

https://nesbitt.io/2026/05/11/proxy.html · 11 May 2026

A lightweight multi-ecosystem caching package proxy

package-managers tools git-pkgs security

https://nesbitt.io/2026/05/10/madame-semver-will-see-you-now.html · 10 May 2026

The cards do not lie.

package-managers satire

https://nesbitt.io/2026/05/05/package-manager-threat-models.html · 5 May 2026

The non-CVE half of package manager security

package-managers security

https://nesbitt.io/2026/05/04/package-manager-cwes.html · 4 May 2026

Recurring weakness classes in package managers

package-managers security

https://nesbitt.io/2026/05/02/a-github-for-maintainers.html · 2 May 2026

Giving dependencies the same treatment the fork got

github package-managers forges

https://nesbitt.io/2026/05/01/patching-and-forking-in-package-managers.html · 1 May 2026

What to do when upstream ghosts you

package-managers security

https://nesbitt.io/2026/04/28/github-actions-is-the-weakest-link.html · 28 Apr 2026

Anne Robinson would like a word with .github/workflows

github security package-managers supply-chain

https://nesbitt.io/2026/04/27/the-stages-of-package-installation.html · 27 Apr 2026

Denial, anger, bargaining, depression, acceptance, postinstall.

package-managers security