← Feed

Posts

• View post

  Was much easier to get git-pkgs modules running in the browser as wasm than expected!

• View post

  Now Hiring: Senior Open Source Maintainer https://nesbitt.io/2026/08/28/now-hiring-senior-open-source-maintainer.html

• View post

  Paraphrasing an email from a security company : We copied one of your blog posts and turned into an advert for one of our products. Please add a link to our blog post to the end of yours. 🥉

• View post

  The AI Phrasebook https://nesbitt.io/2026/07/31/the-ai-phrasebook.html

• View post

  Why npm Dependency Trees Are So Big https://nesbitt.io/2026/07/28/why-npm-dependency-trees-are-so-big.html

• View post

  Anyone else get the fear when they get a dependabot update for anything called xz? https://github.com/git-pkgs/archives/pull/18

• View post

  RE: https://mastodon.social/@andrewnez/116974498919761167 This one really touched a nerve, I’ve had a number of emails from real maintainers today sharing their stories that end up being way too similar 🥲

• View post

  Seems that Google AI Overviews still doesn't quite understand satire.

• View post

  I could not write this homebrew thread as a satire piece if i wanted to, real life is much more cursed: https://github.com/Homebrew/homebrew-core/issues/289444#issuecomment-5050717674

• View post

  Interview with a Maintainer https://nesbitt.io/2026/07/24/interview-with-a-maintainer.html

• View post

  Fun satire blog post coming tomorrow, and by fun I mean way to close to the bone that it could almost be true 😬

• View post

  Ever wondered how much circular funding there is within GitHub Sponsors? Active Mutual Pairs: 155 Total Mutual Pairs: 845 Accounts Sponsoring Each Other: 255 Sponsorship Triangles: 42 Sponsorship Clusters: 26 Largest Cluster: 27 accounts https://sponsors.ecosyste.ms/reciprocity

• View post

  A good first issue if you'd like to contribute to @ecosystems@mastodon.social to improve NuGet metadata: https://github.com/ecosyste-ms/packages/issues/1740

• View post

  Typical, I go out the house for half an hour and one of my databases falls over 🫠

• View post

  --end-of-options https://nesbitt.io/2026/07/21/end-of-options.html

• View post

  brew vulns has now been merged into homebrew and shipped in v6.0.11 https://github.com/Homebrew/brew/releases/tag/6.0.11

• View post

  I’m now an official maintainer of homebrew🍻

• View post

  The CRA is not about open source - https://nesbitt.io/2026/07/01/the-cra-is-not-about-open-source.html

• View post

  Taking Roads and Bridges literally - Reflections on UN Open Source Week 2026 https://nesbitt.io/2026/06/30/taking-roads-and-bridges-literally.html

• View post

  Almost a million requests to the blog over the weekend, this post really did the rounds! https://nesbitt.io/2026/06/26/incident-report-cve-2026-lgtm.html Already got me thinking about the next instalment 🤔

• View post

  Incident Report: CVE-2026-LGTM https://nesbitt.io/2026/06/26/incident-report-cve-2026-lgtm.html

• View post

  Starting the long trip to Long Beach for @pycon 🏖️

• View post

  Centrality is not vitality, don't automatically reach for PageRank on dependency graphs: https://nesbitt.io/2026/05/14/centrality-is-not-vitality.html

• View post

  So I had a productive flight to @pycon: https://alpha-omega-security.github.io/heatmap/ Note: this almost certainly does not work on small screens, sorry! Note 2: only around 2k projects included atm mostly because downloading more data on plane wifi took too long.

• View post

  Just landed in LA for @pycon, hopefully no more GitHub action related security incidents whilst I was traveling, there’s no space left to fit any more in!

• View post

  I love how accidentally pressing the “request copilot review” button can now cost you a dollar (or more if it’s a big pr) 💸

• View post

  Language Registries Are Unstable by Default: https://nesbitt.io/2026/05/15/language-registries-are-unstable-by-default.html

• View post

  Not a Security Issue: https://nesbitt.io/2026/05/12/not-a-security-issue.html

• View post

  I don't even know what is real anymore

• View post

  Madame Semver Will See You Now 🔮 https://nesbitt.io/2026/05/10/madame-semver-will-see-you-now.html