Trusted publishing configurations for npm can now be granted permission to manage dist-tags (e.g., promoting a version to latest, updating next and beta pointers) using short-lived OIDC credentials in...

You can now select Read and write (stage only) when creating an npm granular access token. This lets your automated workflows stage package versions for review without giving the token…

YouTube video by Roman Kaslivtsev

Explore this post and more from the Seattle community

PKGBUILDs for Arch Linux . Contribute to novica/aur-packages development by creating an account on GitHub.

Our next npm major version, v12, introduces security-related default changes to npm install. All these changes are available behind warnings in npm today on 11.16.0 or newer, so you can…

Our next npm major version, v12, introduces security-related default changes to npm install. All these changes are available behind warnings in npm today on 11.16.0 or newer, so you can…

Our next npm major version, v12, introduces security-related default changes to npm install. All these changes are available behind warnings in npm today on 11.16.0 or newer, so you can…

YouTube video by The Linux Foundation

All the world's a stage, and all the packages are merely players

When NuGet finds a vulnerable package in your project, it tells you. NU1901 through NU1904 have warned about CVEs in your dependencies for a while now. The SDK that runs the build, though? That’s been...

Documentation for the npm registry, website, and command-line interface

As initially announced on npm’s X channel, we have invalidated granular access tokens with write access that bypass two-factor authentication. This action was taken to help prevent supply chain att...

View more about this event at Open Source Summit + Embedded Linux Conference North America 2026

Summary Block dependency install scripts (preinstall, install, postinstall, and auto-detected node-gyp builds) by default during npm install. Projects opt in to running scripts for specific depende...

With half-way through the Debian 14 "Forky" development cycle, the Debian release team is out with an update this weekend and some big news...

The stars are aligning in unmistakable ways for Nix and we are leading the charge.

This is a big one. Basically a rewrite of the internals to properly follow ECMA-427, with breaking changes we'd been putting off. Breaking Nullable reference types are on (#73). Namespace, Version...

Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.

Today we are absolutely thrilled to announce the release of TypeScript 7.0 Beta! If you haven’t been following TypeScript 7.0’s development, this release is significant in that it is built on a comple...

An AI agent called every pub in Ireland to find the price of a pint of Guinness. Explore county averages, find the cheapest pint near you, and compare 4,500+ pubs.

Dependabot now supports Nix flakes. Add nix as a package ecosystem in your dependabot.yml file. Dependabot will then monitor your flake.lock inputs and open pull requests when newer commits are…

40 common false assumptions programmers make about names, debunked with real-world examples from global naming systems and identity practices.

TypeScript 6.0 is now available! TypeScript 6 is a stepping-stone release, aligning with the upcoming native-speed 7.0 release.

.NET parser for Package URLs (ECMA-427). Contribute to package-url/packageurl-dotnet development by creating an account on GitHub.

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

Dailymotion video by The New Yorker

Test your knowledge of King County Metro routes with this daily quiz game.

Test your knowledge of King County Metro routes with this daily quiz game.