» Tag
package-managers
2 postsUnfinished Work in Package Security: Gaps Between Controls
Nx, Ledger, and tj-actions incidents expose gaps between independent package security controls, with lessons for engineering teams.
Fetching Dependencies Directly from VCS
Differences in dependency management between Go and Ruby, focusing on security advantages.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.com