One of the strengths of Homebrew, despite it being unpopular, is being willing to break backwards compatibility when necessary.

NPM’s unwillingness to do so reflects GitHub’s: both show excessive caution that harm both security and usability.

https://nesbitt.io/2026/03/31/npms-defaults-are-bad.html

I clearly need to start a wall of “trusted publishing would have prevented this” incidents

Edit: but not axios, maybe! Looks like that one may be full maintainer account compromise.

Heads-up for published authors:

The deadline to join the Anthropic class-action copyright settlement is March 30. If you have published a book, you may be eligible to receive ~$1,500 per book, so it’s worth your time to check it out.

I had been putting it off and finally completed my forms last week.

Learn more at the Authors Guild: https://authorsguild.org/advocacy/artificial-intelligence/what-authors-need-to-know-about-the-anthropic-settlement/

Start the process: https://www.anthropiccopyrightsettlement.com/