← Feed

Posts

• Post #4355556

  Paraphrasing an email from a security company : We copied one of your blog posts and turned into an advert for one of our products. Please add a link to our blog post to the end of yours. 🥉

• Post #4283323

  The AI Phrasebook https://nesbitt.io/2026/07/31/the-ai-phrasebook.html

• Post #4164379

  Why npm Dependency Trees Are So Big https://nesbitt.io/2026/07/28/why-npm-dependency-trees-are-so-big.html

• Post #4088429

  Anyone else get the fear when they get a dependabot update for anything called xz? https://github.com/git-pkgs/archives/pull/18

• Post #4072692

  RE: https://mastodon.social/@andrewnez/116974498919761167 This one really touched a nerve, I’ve had a number of emails from real maintainers today sharing their stories that end up being way too similar 🥲

• Post #4070927

  Seems that Google AI Overviews still doesn't quite understand satire.

• Post #4068438

  I could not write this homebrew thread as a satire piece if i wanted to, real life is much more cursed: https://github.com/Homebrew/homebrew-core/issues/289444#issuecomment-5050717674

• Post #4062775

  Interview with a Maintainer https://nesbitt.io/2026/07/24/interview-with-a-maintainer.html

• Post #4046622

  Fun satire blog post coming tomorrow, and by fun I mean way to close to the bone that it could almost be true 😬

• Post #4042121

  Ever wondered how much circular funding there is within GitHub Sponsors? Active Mutual Pairs: 155 Total Mutual Pairs: 845 Accounts Sponsoring Each Other: 255 Sponsorship Triangles: 42 Sponsorship Clusters: 26 Largest Cluster: 27 accounts https://sponsors.ecosyste.ms/reciprocity

• Post #4006174

  A good first issue if you'd like to contribute to @ecosystems@mastodon.social to improve NuGet metadata: https://github.com/ecosyste-ms/packages/issues/1740

• Post #3986702

  Typical, I go out the house for half an hour and one of my databases falls over 🫠

• Post #3986335

  --end-of-options https://nesbitt.io/2026/07/21/end-of-options.html

• Post #3825431

  brew vulns has now been merged into homebrew and shipped in v6.0.11 https://github.com/Homebrew/brew/releases/tag/6.0.11

• Post #3764283

  I’m now an official maintainer of homebrew🍻

• Post #3517110

  The CRA is not about open source - https://nesbitt.io/2026/07/01/the-cra-is-not-about-open-source.html

• Post #3489936

  Taking Roads and Bridges literally - Reflections on UN Open Source Week 2026 https://nesbitt.io/2026/06/30/taking-roads-and-bridges-literally.html

• Post #3472984

  Almost a million requests to the blog over the weekend, this post really did the rounds! https://nesbitt.io/2026/06/26/incident-report-cve-2026-lgtm.html Already got me thinking about the next instalment 🤔

• Post #3418441

  Incident Report: CVE-2026-LGTM https://nesbitt.io/2026/06/26/incident-report-cve-2026-lgtm.html

• Post #2619820

  Starting the long trip to Long Beach for @pycon 🏖️

• Post #2619819

  Centrality is not vitality, don't automatically reach for PageRank on dependency graphs: https://nesbitt.io/2026/05/14/centrality-is-not-vitality.html

• Post #2619818

  So I had a productive flight to @pycon: https://alpha-omega-security.github.io/heatmap/ Note: this almost certainly does not work on small screens, sorry! Note 2: only around 2k projects included atm mostly because downloading more data on plane wifi took too long.

• Post #2619817

  Just landed in LA for @pycon, hopefully no more GitHub action related security incidents whilst I was traveling, there’s no space left to fit any more in!

• Post #2619816

  I love how accidentally pressing the “request copilot review” button can now cost you a dollar (or more if it’s a big pr) 💸

• Post #2619815

  Language Registries Are Unstable by Default: https://nesbitt.io/2026/05/15/language-registries-are-unstable-by-default.html

• Post #2539014

  Not a Security Issue: https://nesbitt.io/2026/05/12/not-a-security-issue.html

• Post #2436420

  I don't even know what is real anymore

• Post #2423115

  Madame Semver Will See You Now 🔮 https://nesbitt.io/2026/05/10/madame-semver-will-see-you-now.html

• Post #2331127

  Weekend at Bernie's - Which of your dependencies are wearing sunglasses? https://nesbitt.io/2026/05/08/weekend-at-bernies.html

• Post #2296206

  The Mismeasure of Open Source: https://nesbitt.io/2026/05/09/the-mismeasure-of-open-source.html