npm v12 is now generally available. npm install now makes install scripts, Git, and remote-URL dependencies opt-in by default. We're also retiring npm 2FA-bypass GAT: no account management (early Aug 2026), no direct publishing (~Jan 2027). More info at github.blog/changelog/20...

npm install-time security and GAT bypass2fa deprecation - GitHub Changelog

npm v12 is now generally available and tagged latest. This major release turns on the install-time security defaults we announced in June, and it’s also where we begin a deprecation…

github.blog

Turns out "let me just npm install real quick" was a security incident the whole time v12 is making dependency install scripts opt-in. I helped build it. You're welcome/I'm sorry. github.blog/changelog/20...

Upcoming breaking changes for npm v12 - GitHub Changelog

Our next npm major version, v12, introduces security-related default changes to npm install. All these changes are available behind warnings in npm today on 11.16.0 or newer, so you can…

github.blog

@caseynewton.bsky.social I bet there are a lot of places you met your wife on in this list tooldirectory.ai/ai-graveyard

@caseynewton.bsky.social FYI, yesterday's newsletter is marked as being published on "Jan 10, 2024" and therefore isn't showing up at the top of the feed on platformer.news

what a shot

Photo by Pierre Lavie. Yes this is me. And I threw my Leica. It landed on the bass plate with hardly a scratch. Another Photographer grabbed it along with my phone and I was able to track him later. I was held face down tear gas deployed right in front of me and pepper sprayed directly into the eye.

chatgpt is down, post handmade em dashes

the one thing i like about generative ai is when it is wrong. because it is always very, very funny. it is so confident and so enthusiastic while failing, like the very best clown. so, i'm here to tell you that there MAY be NOTHING FUNNIER than asking ai to do ASCII drawings. here's donald duck:

We're taking action to make the npm supply chain stronger and harder to attack. 🛡️ Check out our plan to create a more secure future for the JavaScript community.👇 https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/

Our plan for a more secure npm supply chain

GitHub is strengthening npm's security with stricter authentication, granular tokens, and enhanced trusted publishing.

github.blog

This is some of the hardest shit I've seen in my life

@samreich.bsky.social @dropout.tv wanted to let you know that searching for dropout merch online returns this website in the results and it doesn't seem official dropoutmerchs.com

All the lefties fled to Bluesky following Elon Musk’s Twitter takeover. But CEO Jay Graber says the app is for everyone—and could revolutionize how people communicate online. www.wired.com/story/big-in...

Bluesky Is Plotting a Total Takeover of the Social Internet

All the lefties fled to Bluesky following Elon Musk’s Twitter takeover. But CEO Jay Graber says the app is for everyone—and could revolutionize how people communicate online.

wired.com

the new york sewer rats have finally elected a new rat pope

just eat the bay leaf. nothing matters.

On April 18, the Old North Church—where two lanterns once sparked the American revolution—will ring its bells for democracy. I hope houses of worship across the country will join them in this nationwide call to protect our freedom. Learn how your congregation can take part.

This is really unfair to everyone who just voted for him for the racism.

You know who should've won an Oscar last night? The person who designed the little 'Gravity on / off' buttons in Alien Romulus.

funniest highlights of the philly police scanner, a thread

gritty has seized control of the federal government

Bashar al-Assad’s biggest mistake? Not going on Joe Rogan.

“Babe, you don’t get it. See, the bones are the skeletons money. The worms are also their money. Bones = dollars. They can also pull your hair up but NOT out, because they’ll turn to bones. And get this, they came from out of the ground AND all over because underground there’s half as much food.”

Hi Bluesky! I just set up my domain devs.foo as a community handle thanks to the great work that @samuel.bsky.team did! Feel free to use it! #Developers