Package Manager Easter Eggs: https://nesbitt.io/2026/04/03/package-manager-easter-eggs.html
| GitHub | https://github.com/andrew |
| https://twitter.com/teabass | |
| Homepage | https://nesbitt.io |
| bsky | https://bsky.app/profile/andrewnez.bsky.social |
Andrew Nesbitt
@andrewnez
- 1.3K Followers
- 700 Following
- 2.1K Posts
Package Management Nerd, working on mapping the world of open source software https://ecosyste.ms and blogging about package managers at https://nesbitt.io
Package Manager Easter Eggs: https://nesbitt.io/2026/04/03/package-manager-easter-eggs.html
Mike McQuaidMy talk “Ruby on Guard (Rails)” from Haggis Ruby 2024 is now on YouTube.
Weird watching in hindsight when I was very much pre-AI.
If anything, AI only makes the guardrails more important and valuable.
Mike McQuaid - Ruby on Guard (Rails)
Seth LarsonRE: https://fosstodon.org/@pypi/116335453780319113
There is a ton in this report, like how @pypi is able to respond so quickly to malware thanks to our network of trusted reporters and how to keep yourself secure both as a maintainer and user of Python packages.
Python Package IndexPSF Security developers have published incident reports on the LiteLLM & Telnyx #supplychain attacks. Read what happened, who's affected, and what developers & maintainers can do to prepare and protect themselves from future incidents. #security #python
https://blog.pypi.org/posts/2026-04-02-incident-report-litellm-telnyx-supply-chain-attack/
https://blog.pypi.org/posts/2026-04-02-incident-report-litellm-telnyx-supply-chain-attack/
David Revoy
Orde Saunders 🔟@andrewnez I guess that given the standard for JS is mostly terrible code and that's what's gone into the training data then the outputted JS is statistically likely to be mostly terrible code.
People talking about the leaked claude code release has terrible code, it looks pretty standard for the closed source javascript applications I've seen, vibe coded or not!
Oh wow, that's a lot of CVEs in the latest release of rack: https://github.com/rack/rack/blob/main/CHANGELOG.md#security
