Submissions from nesbitt.io

		The Lesser Evil of Compliance: Enterprise SBoM Strategy for CRA Readiness (nesbitt.io)
		1 point by lifeisstillgood 1 day ago \| past \| discuss
		Will AI make package managers redundant? (nesbitt.io)
		1 point by linhns 2 days ago \| past \| 2 comments
		Zig and the M×N Supply Chain Problem (nesbitt.io)
		7 points by todsacerdoti 3 days ago \| past \| discuss
		The C-Shaped Hole in Package Management (nesbitt.io)
		60 points by tanganik 5 days ago \| past \| 73 comments
		Package Chaos Monkey (nesbitt.io)
		2 points by alphager 6 days ago \| past \| discuss
		PkgFed: ActivityPub for Package Releases (nesbitt.io)
		2 points by 8organicbits 7 days ago \| past \| discuss
		Rewriting git-pkgs in Go (nesbitt.io)
		1 point by chmaynard 8 days ago \| past \| discuss
		Package management is a wicked problem (nesbitt.io)
		116 points by zdw 8 days ago \| past \| 77 comments
		A Protocol for Package Management (nesbitt.io)
		2 points by zdw 10 days ago \| past \| discuss
		Workspaces and Monorepos in Package Managers (nesbitt.io)
		27 points by Couto 12 days ago \| past \| 3 comments
		Package Manager Glossary (nesbitt.io)
		4 points by 7777777phil 13 days ago \| past \| discuss
		Workspaces and Monorepos in Package Managers (nesbitt.io)
		2 points by zdw 13 days ago \| past \| discuss
		importmap.lock: A Lockfile for the Web (nesbitt.io)
		1 point by chmaynard 13 days ago \| past \| discuss
		Lockfile Format Design and Tradeoffs (nesbitt.io)
		4 points by 7777777phil 14 days ago \| past
		Reducing Dependabot Noise (nesbitt.io)
		64 points by zdw 20 days ago \| past \| 44 comments
		Best Practices for Reducing Dependabot Noise (nesbitt.io)
		1 point by todsacerdoti 21 days ago \| past
		Brew-vulns: CVE scanning for Homebrew (nesbitt.io)
		4 points by chmaynard 24 days ago \| past
		The Package Management Landscape (nesbitt.io)
		4 points by tqpcharlie 24 days ago \| past \| 1 comment
		The Nine Levels of JavaScript Dependency Hell (nesbitt.io)
		2 points by tqpcharlie 24 days ago \| past \| 1 comment
		Git-pkgs: explore your dependency history (nesbitt.io)
		1 point by riffraff 26 days ago \| past
		How dependabot works (nesbitt.io)
		73 points by zdw 30 days ago \| past \| 14 comments
		Git-pkgs: explore your dependency history (nesbitt.io)
		4 points by chmaynard 31 days ago \| past
		How to Ruin All of Package Management (nesbitt.io)
		2 points by birdculture 32 days ago \| past
		Community Tools Bring Lockfile Support to GitHub Actions (nesbitt.io)
		3 points by emschwartz 33 days ago \| past
		How to Ruin All of Package Management (nesbitt.io)
		4 points by progval 33 days ago \| past
		Categorizing Package Registries (nesbitt.io)
		2 points by zdw 34 days ago \| past
		Cursed Bundler: Using Go Get to Install Ruby Gems – Andrew Nesbitt (nesbitt.io)
		2 points by hboon 35 days ago \| past
		Why JavaScript Needed Docker (nesbitt.io)
		2 points by ArmageddonIt 36 days ago \| past
		How to Ruin All of Package Management (nesbitt.io)
		7 points by gpi 36 days ago \| past
		Cursed Bundler: Using go get to install Ruby Gems (nesbitt.io)
		26 points by SPBS 36 days ago \| past \| 3 comments
		More