April 2026
Announcing the 2026 Open Source Fantasy Draft
Twelve teams, snake draft, standard scoring, no salary cap
GitHub Actions is the weakest link
Anne Robinson would like a word with .github/workflows
The stages of package installation
Denial, anger, bargaining, depression, acceptance, postinstall.
brief
A knowledge base of project conventions, exposed as a CLI.
Features everyone should steal from npmx
What happens when users design their own package registry frontend
The Tuesday Test
Like the Turing test but with more tacos.
Standing on the shoulders of Homebrew
Rewriting the easy parts of Homebrew.
Common Package Specification
Not the cross-ecosystem format the name suggests.
Package Registries and Pagination
100MB of metadata for 10,451 versions.
Package Security Defenses for AI Agents
Lockfiles, sandboxes, and cooldown timers.
Package Security Problems for AI Agents
Packages all the way down, agents all the way up.
Who Built This?
Tracing a dependency back to its source commit.
The Cathedral and the Catacombs
Stretching a metaphor deep into the floor.
What does Open Source mean?
A stack of incompatible expectations.
Package Manager Easter Eggs
A tour of the easter eggs hiding inside package managers.