Submissions from nesbitt.io

		16 Best Practices for Reducing Dependabot Noise (nesbitt.io)
		2 points by zdw 10 hours ago \| past \| 1 comment
		Best Practices for Reducing Dependabot Noise (nesbitt.io)
		1 point by todsacerdoti 1 day ago \| past \| discuss
		Brew-vulns: CVE scanning for Homebrew (nesbitt.io)
		4 points by chmaynard 4 days ago \| past \| discuss
		The Package Management Landscape (nesbitt.io)
		4 points by tqpcharlie 4 days ago \| past \| 1 comment
		The Nine Levels of JavaScript Dependency Hell (nesbitt.io)
		2 points by tqpcharlie 4 days ago \| past \| 1 comment
		Git-pkgs: explore your dependency history (nesbitt.io)
		1 point by riffraff 6 days ago \| past \| discuss
		How dependabot works (nesbitt.io)
		73 points by zdw 9 days ago \| past \| 14 comments
		Git-pkgs: explore your dependency history (nesbitt.io)
		4 points by chmaynard 10 days ago \| past \| discuss
		How to Ruin All of Package Management (nesbitt.io)
		2 points by birdculture 12 days ago \| past \| discuss
		Community Tools Bring Lockfile Support to GitHub Actions (nesbitt.io)
		3 points by emschwartz 12 days ago \| past \| discuss
		How to Ruin All of Package Management (nesbitt.io)
		4 points by progval 13 days ago \| past \| discuss
		Categorizing Package Registries (nesbitt.io)
		2 points by zdw 13 days ago \| past \| discuss
		Cursed Bundler: Using Go Get to Install Ruby Gems – Andrew Nesbitt (nesbitt.io)
		2 points by hboon 15 days ago \| past
		Why JavaScript Needed Docker (nesbitt.io)
		2 points by ArmageddonIt 15 days ago \| past
		How to Ruin All of Package Management (nesbitt.io)
		7 points by gpi 15 days ago \| past
		Cursed Bundler: Using go get to install Ruby Gems (nesbitt.io)
		26 points by SPBS 16 days ago \| past \| 3 comments
		How uv got so fast (nesbitt.io)
		1290 points by zdw 16 days ago \| past \| 459 comments
		Package managers keep using Git as a database, it never works out (nesbitt.io)
		784 points by birdculture 17 days ago \| past \| 464 comments
		Package managers keep using Git as a database, it never works out (nesbitt.io)
		2 points by WhyNotHugo 18 days ago \| past \| 2 comments
		Package managers keep using Git as a database, it never works out (nesbitt.io)
		5 points by zdw 18 days ago \| past \| 1 comment
		Could lockfiles just be SBOMs? (nesbitt.io)
		77 points by zdw 19 days ago \| past \| 62 comments
		Federated Package Management and the Zooko Triangle (nesbitt.io)
		4 points by zdw 21 days ago \| past
		Typosquatting in Package Managers (nesbitt.io)
		2 points by zdw 25 days ago \| past \| 1 comment
		How I Assess Open Source Libraries (nesbitt.io)
		2 points by gpi 26 days ago \| past
		Why I'm Fascinated by Package Management (nesbitt.io)
		3 points by ryangibb 32 days ago \| past
		GitHub Actions has a package manager, and it might be the worst (nesbitt.io)
		444 points by robin_reala 35 days ago \| past \| 262 comments
		GitHub Actions Has a Package Manager, and It Might Be the Worst (nesbitt.io)
		3 points by mperham 36 days ago \| past \| 1 comment
		Package Manager Design Tradeoffs (nesbitt.io)
		2 points by todsacerdoti 36 days ago \| past
		GitHub Actions Has a Package Manager, and It Might Be the Worst (nesbitt.io)
		20 points by todsacerdoti 36 days ago \| past \| 2 comments
		What Is a Package Manager? (nesbitt.io)
		2 points by todsacerdoti 38 days ago \| past \| 1 comment
		More