April 2026

All posts

Package Registries and Pagination

100MB of metadata for 10,451 versions.

Package Security Defenses for AI Agents

Lockfiles, sandboxes, and cooldown timers.

Package Security Problems for AI Agents

Packages all the way down, agents all the way up.

Who Built This?

Tracing a dependency back to its source commit.

The Cathedral and the Catacombs

Stretching a metaphor deep into the floor.

What does Open Source mean?

A stack of incompatible expectations.

Package Manager Easter Eggs

A tour of the easter eggs hiding inside package managers.