Had a look at how cargo-vet is doing (spoiler: growing quickly). I really enjoy it for my projects and was wondering how projects deal with audit burden (especially with many crate updates). Wrote up a little summary here: lightsquares.dev/blog/cargo-v... 🦀

A look at cargo-vet in 2026

Cargo-vet requires audits of third-party Rust dependencies before they ship. We analyzed 408 open-source projects to measure adoption, audit workload, exemptions, and audit lag.

lightsquares.dev

If you want to make a copy of the entire Bluesky network (or some subset of it, or some other app built on atproto), Tap is now the best way do do it. I hope this will enable more people do do, for example, interesting social network analysis research

daniel holmgren 🫠@dholms.at · 9mo ago

finally landed it! Tap is your all-in-one sync tool for the Atmosphere: webhooks, backfill, filtering, signaling collections, no cbor/msts/signatures/cursors. this thing's got it all! give it a go and let me know what you think & if you run into any issues docs.bsky.app/blog/introdu...

How to trust that the binaries that we deploy are truthfully built from the correct source code? 🤝 Just back from ACM CCS '25 🌏 where we presented Attestable Builds as a solution to this challenge. It complements Reproducible Builds and uses TEEs as a trust anchor. With @coderlime.bsky.social

PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.