Andrew Nesbitt

I’m on holiday this week, so I’m phoning it in and doing a roundup of the trends I’ve seen across sixteen weeks of This Week in Package Management.

I’m on holiday this week, so here’s a listicle.

Week sixteen of the roundup, built from the package manager OPML feed collection and whatever I’ve posted or boosted on Mastodon.

By Sophia Vargas, Google Open Source & Andrew Nesbitt, Ecosyste.ms.

I added a worktree to a repository last week to try a branch alongside the main checkout, ran git submodule update --init in it because the build needed the vendored dependencies, and when I was done went to clean up with git worktree remove, which git re…

Week fifteen of the roundup, built from the package manager OPML feed collection and whatever I’ve posted or boosted on Mastodon. pnpm 12 pnpm 12.0 is the stable release of the Rust rewrite.

Location: Lincoln, Nebraska, USA Employment type: Volunteer Term: Permanent Compensation: $0 Reports to: The community Direct reports: None Start date: Immediate We’re looking for a passionate, self-directed engineer to take full ownership of one of the m…

Aman Sharma reported this week that packages.ecosyste.ms had the latest version of protobuf on the Bazel Central Registry (BCR, the default package index for Bazel’s built-in dependency manager) as 3.19.6.

I’ve been reading through the recent run of incidents where package-manager infrastructure was the attack surface, as one does on a Sunday afternoon.

Week fourteen of the roundup, built from the package manager OPML feed collection and whatever I’ve posted or boosted on Mastodon.