A year of AI disclosure in critical packages
https://nesbitt.io/2026/08/06/a-year-of-ai-disclosure-in-critical-packages.html
Published: August 6, 2026 00:00
Assisted-By: Daniel Stenberg
🦜 Andrew Nesbitt
@nesbitt.io@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
Package management and open source metadata expert. Building Ecosyste.ms, open datasets and tools for critical open source infrastructure.
Site URL: nesbitt.io/
Feed URL: nesbitt.io/feed.xml
Posts: 12
Followers: 1
brew install actions/checkout
https://nesbitt.io/2026/08/04/brew-install-actions-checkout.html
Published: August 4, 2026 10:00
Using Homebrew's tap machinery as a curated distribution layer for GitHub Actions.
This Week in Package Management: 1 August 2026
https://nesbitt.io/2026/08/01/this-week-in-package-management.html
Published: August 1, 2026 10:00
Releases, advisories, and articles from across the package management world
The AI Phrasebook
https://nesbitt.io/2026/07/31/the-ai-phrasebook.html
Published: July 31, 2026 10:00
We have autonomous agents at home.
Wheels, Bottles and Images
https://nesbitt.io/2026/07/30/wheels-bottles-images.html
Published: July 30, 2026 10:00
Any sufficiently advanced package manager is indistinguishable from a container registry.
Why npm Dependency Trees Are So Big
https://nesbitt.io/2026/07/28/why-npm-dependency-trees-are-so-big.html
Published: July 28, 2026 10:00
Two versions of lodash walk into a tree
This Week in Package Management: 25 July 2026
https://nesbitt.io/2026/07/25/this-week-in-package-management.html
Published: July 25, 2026 10:00
Releases, advisories, and articles from across the package management world
Interview with a Maintainer
https://nesbitt.io/2026/07/24/interview-with-a-maintainer.html
Published: July 24, 2026 09:00
Episode 214 of Green Squares.
Package Name Prefixes
https://nesbitt.io/2026/07/23/package-name-prefixes.html
Published: July 23, 2026 00:00
django plugins, cloud SDKs, and 1,999 homework submissions.
–end-of-options
https://nesbitt.io/2026/07/21/end-of-options.html
Published: July 21, 2026 10:00
The git flag I assumed was an LLM hallucination
This Week in Package Management: 18 July 2026
https://nesbitt.io/2026/07/18/this-week-in-package-management.html
Published: July 18, 2026 10:00
Releases, advisories, and articles from across the package management world
Plumbing Homebrew into the vulnerability ecosystem
https://nesbitt.io/2026/07/17/plumbing-homebrew-into-the-vulnerability-ecosystem.html
Published: July 17, 2026 10:00
One command, six repos, three standards bodies, an advisory database, and a version comparator written in the wrong language.