Submissions from nesbitt.io

		Respectful Open Source (nesbitt.io)
		2 points by chmaynard 66 days ago \| past
		The many flavors of ignore files (nesbitt.io)
		2 points by chmaynard 68 days ago \| past
		Lockfiles Killed Vendoring (nesbitt.io)
		3 points by 8organicbits 69 days ago \| past
		Sandwich Bill of Materials (nesbitt.io)
		241 points by zdw 71 days ago \| past \| 26 comments
		Dependency Resolution Methods (nesbitt.io)
		1 point by zdw 72 days ago \| past
		Git's Magic Files (nesbitt.io)
		2 points by zdw 74 days ago \| past
		Package Management at FOSDEM 2026 (nesbitt.io)
		1 point by chmaynard 75 days ago \| past
		Incident CVE-2024-Yikes (nesbitt.io)
		6 points by robin_reala 77 days ago \| past
		The Dependency Layer in Digital Sovereignty (nesbitt.io)
		2 points by speckx 77 days ago \| past
		The Lesser Evil of Compliance: Enterprise SBoM Strategy for CRA Readiness (nesbitt.io)
		1 point by lifeisstillgood 80 days ago \| past
		Will AI make package managers redundant? (nesbitt.io)
		1 point by linhns 80 days ago \| past \| 2 comments
		Zig and the M×N Supply Chain Problem (nesbitt.io)
		7 points by todsacerdoti 82 days ago \| past
		The C-Shaped Hole in Package Management (nesbitt.io)
		60 points by tanganik 84 days ago \| past \| 73 comments
		Package Chaos Monkey (nesbitt.io)
		2 points by alphager 85 days ago \| past
		PkgFed: ActivityPub for Package Releases (nesbitt.io)
		2 points by 8organicbits 85 days ago \| past
		Rewriting git-pkgs in Go (nesbitt.io)
		1 point by chmaynard 86 days ago \| past
		Package management is a wicked problem (nesbitt.io)
		117 points by zdw 87 days ago \| past \| 77 comments
		A Protocol for Package Management (nesbitt.io)
		2 points by zdw 88 days ago \| past
		Workspaces and Monorepos in Package Managers (nesbitt.io)
		27 points by Couto 3 months ago \| past \| 3 comments
		Package Manager Glossary (nesbitt.io)
		4 points by 7777777phil 3 months ago \| past
		Workspaces and Monorepos in Package Managers (nesbitt.io)
		2 points by zdw 3 months ago \| past
		importmap.lock: A Lockfile for the Web (nesbitt.io)
		1 point by chmaynard 3 months ago \| past
		Lockfile Format Design and Tradeoffs (nesbitt.io)
		4 points by 7777777phil 3 months ago \| past
		Reducing Dependabot Noise (nesbitt.io)
		64 points by zdw 3 months ago \| past \| 44 comments
		Best Practices for Reducing Dependabot Noise (nesbitt.io)
		1 point by todsacerdoti 3 months ago \| past
		Brew-vulns: CVE scanning for Homebrew (nesbitt.io)
		4 points by chmaynard 3 months ago \| past
		The Package Management Landscape (nesbitt.io)
		4 points by _w7qa 3 months ago \| past \| 1 comment
		The Nine Levels of JavaScript Dependency Hell (nesbitt.io)
		2 points by _w7qa 3 months ago \| past \| 1 comment
		Git-pkgs: explore your dependency history (nesbitt.io)
		1 point by riffraff 3 months ago \| past
		How dependabot works (nesbitt.io)
		73 points by zdw 3 months ago \| past \| 14 comments
		More