@andrewnez.mastodon.social.ap.brid.gy
Package Management Nerd, working on mapping the world of open source software https://ecosyste.ms and blogging about package managers at https://nesbitt.io
🌉 bridged from ⁂ https://mastodon.social/@andrewnez, follow @ap.brid.gy to interact
@andrewnez.mastodon.social.ap.brid.gyI tried to map out all the different projects i work on and how they connect together and the different concepts: https://nesbitt.io/mindmap/
(Definitely better on a big desktop screen than a phone)
@andrewnez.mastodon.social.ap.brid.gyPackage managers have an integrity problem
https://blog.trailofbits.com/2026/10/14/package-managers-have-an-integrity-problem/
@andrewnez.mastodon.social.ap.brid.gyThat's a new one 🤔
@andrewnez.mastodon.social.ap.brid.gyThis sounds an awful lot like SVN to me 🤔
https://www.anthropic.com/engineering/redesigning-source-control
@andrewnez.mastodon.social.ap.brid.gyReposted by @andrewnez.mastodon.social.ap.brid.gyNow That's What I Call Technical Debt!
https://nesbitt.io/2026/10/12/now-thats-what-i-call-technical-debt.html
@andrewnez.mastodon.social.ap.brid.gy@cthoyt funny enough, i got a wifi canbus read/writer today in the post, so potentially yes!
@andrewnez.mastodon.social.ap.brid.gyMade a little bibtex parser today, also supports extracting references from readmes: https://github.com/git-pkgs/bibtex
@andrewnez.mastodon.social.ap.brid.gy@cthoyt i'm one of the least musical people ever
@andrewnez.mastodon.social.ap.brid.gyNow That's What I Call Technical Debt!
https://nesbitt.io/2026/10/12/now-thats-what-i-call-technical-debt.html
@andrewnez.mastodon.social.ap.brid.gyThe PRs start coming and they don't stop coming, Bots keep shipping and the tests keep running. Only made sense to automate, Now I'm reviewing slop at a staggering rate. So much to merge, so much to break, So what's wrong with another rewrite? You'll never know if you don't deploy, You'll never […]
@andrewnez.mastodon.social.ap.brid.gyThis Week in Package Management: 10 October 2026
https://nesbitt.io/2026/10/10/this-week-in-package-management.html
@andrewnez.mastodon.social.ap.brid.gyPackage Management RFCs: https://nesbitt.io/2026/10/07/package-management-rfcs.html
@andrewnez.mastodon.social.ap.brid.gyNew hobby: trying to make deterministic versions of llm powered dependency analysis tools using the various parts of git-pkgs. Normally can get 90% of the way that and it ends up being much faster and cheaper.
@andrewnez.mastodon.social.ap.brid.gyIt's an older example, but it checks out: https://github.com/PogiNate/A.K.A.
@andrewnez.mastodon.social.ap.brid.gyTIL you can end your github repo names with a dot, so the git clone url is github.com/andrew/foo..git 🙈
@andrewnez.mastodon.social.ap.brid.gyIt's Sunday evening, do you know which user agents your residential proxy scraper farms are using today?
@andrewnez.mastodon.social.ap.brid.gyReposted by @andrewnez.mastodon.social.ap.brid.gyThis Week in Package Management: 3 October 2026
https://nesbitt.io/2026/10/03/this-week-in-package-management.html
@andrewnez.mastodon.social.ap.brid.gyThis Week in Package Management: 3 October 2026
https://nesbitt.io/2026/10/03/this-week-in-package-management.html
@andrewnez.mastodon.social.ap.brid.gyAs far as I can tell, the main drivers are the cooldown feature and it being small, lightweight and fast, often put in front of other bigger package caches. I mostly started that project as a way to have some registry APIs to test against without smashing the real ones.
@andrewnez.mastodon.social.ap.brid.gySeems like quite a lot of people starting to use https://github.com/git-pkgs/proxy daily feature requests and PRs coming in now.
