Andrew Nesbitt
@andrewnez.bsky.social
Working on mapping the world of open source software https://ecosyste.ms and empowering developers with https://octobox.io Mostly posting on https://mastodon.social/@andrewnez
brew install actions/checkout - Using Homebrew's tap machinery as a curated distribution layer for GitHub Actions. nesbitt.io/2026/08/04/b...
brew install actions/checkout
Using Homebrew’s tap machinery as a curated distribution layer for GitHub Actions.
nesbitt.io
brew install actions/checkout - Using Homebrew's tap machinery as a curated distribution layer for GitHub Actions. nesbitt.io/2026/08/04/b...
brew install actions/checkout
Using Homebrew’s tap machinery as a curated distribution layer for GitHub Actions.
nesbitt.io
Let’s Play “htmx 4: the game” (by @htmx.org) 🐴 #htmx 4 was published exclusively for the Game Boy and Game Boy Color platforms. I recorded my play-through including the source code. This game is tough! sethmlarson.dev/htmx-4-the-g... #web #gameboy #gbdev #retrogaming
Let’s Play “htmx 4: the game”
Moments ago I just finished playing “htmx 4: the game”, the first JavaScript library published exclusively for Game Boy and Game Boy Color. I've recorded my play session and published the video to ...
sethmlarson.dev
🧾 Introducing npm.tax Estimate the probability of being impacted by a breach in your npm supply chain. Adjust the knobs to see how slimming your node_modules lowers your risk. Look up a package to see its own risk profile, then share the report, e.g. npm.tax?direct=59&tr.... What's your npm tax?
npm.tax: npm supply-chain risk explorer
Explore how your code, npm dependency count, breach probability, and time horizon combine into cumulative supply-chain risk.
npm.tax
I’m exploring the mental health effects of AI coding. This is a super quick (blazing fast), anonymous survey. Please fill out and share so that the responses will be well rounded. forms.gle/dpD8Tk1QnXAz...
AI Coding & Mental Health
All answers are anonymous.
forms.gle
The Python Software Foundation is hiring a Security Developer. If you've got experience with Python, security, and collaborating with open source projects then we'd love to hear from you: jobs.pyfound.org/apply/ei03ut...
Security Developer - Python Software Foundation - Career Page
Apply to Security Developer at Python Software Foundation in Remote.
jobs.pyfound.org
this year i've carved a big chunk of my time out to officially work on OSS. if you like what I do, or use the things I work on, sponsorships go a long way. these help me keep the balance I have, and allow me to dedicate a lot more time to open source. thank you to those who already sponsor me 💙
Sponsor @43081j on GitHub Sponsors
Maintainer of clack, chai, parse5, unjs, vueuse, tinylibs, & more. One of the e18e.dev leads. Core contributor to lit and modernweb.
github.com
the best news! 🎉 this is the kind of community collaboration i'd love to see more orgs doing. CodeRabbit can now flag redundant packages amongst other things 🧹
Santosh Yadav | GDE 🅰️ | GitHub ⭐ | MVP@santoshyadav.dev · last wk.CodeRabbit's ESLint reviews now run the e18e ESLint plugin v0.5.1by default. It was great to collaborate with @43081j.com to make this possible 😍
I had a chat with @joshcorman.bsky.social about securing critical infrastructure on #OSSPodcast Josh is one of the best in the industry on this topic. He has a ton of interesting (and sometimes scary) things to say about this opensourcesecurity.io/2026/2026-07...
Securing critical infrastructure with Josh Corman
Open Source Security welcomes Josh Corman to talk about the challenges around securing our critical infrastructure. Specifically the discussion centers around our water supplies. There are a lot of re...
opensourcesecurity.io
Homebrew is thriving while other open source projects struggle. Its scarcest resource isn't money: it's maintainer motivation.
Open Source Must Be Fun (Or It Will Die)
Homebrew is thriving while other open source projects struggle. Its scarcest resource isn't money: it's maintainer motivation.
mikemcquaid.com
I could not write this homebrew thread as a satire piece if i wanted to, real life is much more cursed: github.com/Homebrew/hom...
Gemini-cli improperly deprecated · Issue #289444 · Homebrew/homebrew-core
brew config AND brew doctor output OR brew gist-logs <formula> link ○ → brew config bHOMEBREW_VERSION: 6.0.3 rORIGIN: https://github.com/Homebrew/brew HEAD: 5c38c6b3fc42281af432cda526dd0509172f681b...
github.com
I wrote about how, like many other open-source projects, CPython is experiencing a huge increase in security reports. Charts inside! hugovk.dev/blog/2026/se... #Python #security #OpenSource
Security: line goes up
hugovk.dev
We are a group of experts in #opensource, software ethics, engineering, community building + looking to collaborate with anyone ~building #openmodels/#openweights ~ and interested in alignment with the OSS communities they depend on. We will also be at FOSSY! sunnydeveloper.com/be-the-first/
Be the first open model builder to demonstrate alignment with open source communities
AI models are built on the labor of open source communities in two distinct ways: as a dependency of the technology (the frameworks, libraries, and tooling models and their infrastructure run on) and ...
sunnydeveloper.com
Package Management as Org Chart - Conway's Law applied to dependency management designs. nesbitt.io/2026/07/10/p...
Package Management as Org Chart
Conway’s Law applied to dependency management designs.
nesbitt.io
Trying out a new format of post breaking down the details of different package managers, their design, security and trade offs. First up Zig nesbitt.io/2026/07/09/u...
Unboxed: Zig
Zig’s package manager: mechanics, categorisation, governance, threat model.
nesbitt.io