Mastodon Feed
andrewnez ("Andrew Nesbitt") wrote:
I fucked up the publish dates, so two blog posts live today:
https://nesbitt.io/2026/09/22/package-manager-threat-model-revisited.html
https://nesbitt.io/2026/09/22/unfinished-work-in-package-security.html