July 2026
The AI Phrasebook
We have autonomous agents at home.
Wheels, Bottles and Images
Any sufficiently advanced package manager is indistinguishable from a container registry.
Why npm Dependency Trees Are So Big
Two versions of lodash walk into a tree
This Week in Package Management: 25 July 2026
Releases, advisories, and articles from across the package management world
Interview with a Maintainer
Episode 214 of Green Squares.
Package Name Prefixes
django plugins, cloud SDKs, and 1,999 homework submissions.
--end-of-options
The git flag I assumed was an LLM hallucination
This Week in Package Management: 18 July 2026
Releases, advisories, and articles from across the package management world
Plumbing Homebrew into the vulnerability ecosystem
One command, six repos, three standards bodies, an advisory database, and a version comparator written in the wrong language.
This Week in Package Management: 11 July 2026
Releases, advisories, and articles from across the package management world
Package Management as Org Chart
Conway's Law applied to dependency management designs.
Unboxed: Zig
Zig's package manager: mechanics, categorisation, governance, threat model.
Content addressing in package managers
Names are for humans, hashes are for everything else
This Week in Package Management: 4 July 2026
Releases, advisories, and articles from across the package management world
The CRA is not about open source
The CRA created an open-source steward role, then left maintenance unfunded.