Standard Search

https://nesbitt.io/2026/04/16/features-everyone-should-steal-from-npmx.html · 16 Apr 2026

What happens when users design their own package registry frontend

package-managers npm

https://nesbitt.io/2026/04/15/the-tuesday-test.html · 15 Apr 2026

Like the Turing test but with more tacos.

package-managers homebrew supply-chain security

https://nesbitt.io/2026/04/14/standing-on-the-shoulders-of-homebrew.html · 14 Apr 2026

Rewriting the easy parts of Homebrew.

package-managers homebrew

https://nesbitt.io/2026/04/13/common-package-specification.html · 13 Apr 2026

Not the cross-ecosystem format the name suggests.

package-managers metadata sbom deep-dive

https://nesbitt.io/2026/04/10/package-registries-and-pagination.html · 10 Apr 2026

100MB of metadata for 10,451 versions.

package-managers registries

https://nesbitt.io/2026/04/09/package-security-defenses-for-ai-agents.html · 9 Apr 2026

Lockfiles, sandboxes, and cooldown timers.

security package-managers ai

https://nesbitt.io/2026/04/08/package-security-problems-for-ai-agents.html · 8 Apr 2026

Packages all the way down, agents all the way up.

security package-managers ai reference

https://nesbitt.io/2026/04/07/who-built-this.html · 7 Apr 2026

Tracing a dependency back to its source commit.

package-managers security supply-chain

https://nesbitt.io/2026/04/03/package-manager-easter-eggs.html · 3 Apr 2026

A tour of the easter eggs hiding inside package managers.

package-managers reference

https://nesbitt.io/2026/03/31/npms-defaults-are-bad.html · 31 Mar 2026

The npm client's default settings are a root cause of JavaScript's recurring supply chain security problems.

package-managers javascript npm security