August 2026
This Week in Package Management: 29 August 2026
Releases, advisories, and articles from across the package management world
Now Hiring: Senior Open Source Maintainer
A rare opportunity to make a real impact in a fast-paced, high-visibility role.
Bazel Module Versions Aren't SemVer
According to strict SemVer, protobuf's latest Bazel release is from 2022.
Hardening the Override Flag
export PIP_BREAK_SYSTEM_PACKAGES=1
This Week in Package Management: 22 August 2026
Releases, advisories, and articles from across the package management world
Issues in the Repo
refs/bugs, refs/notes, refs/heads/ticgit, or a directory full of YAML.
Two-Factor Authentication Across Package Registries
Something you have, something you know, and someone else's OAuth.
This Week in Package Management: 15 August 2026
Releases, advisories, and articles from across the package management world
How This Blog Is Built
A full walkthrough of the custom static site generator, content pipeline, and edge deployment behind nesbitt.io.
Supplier Security Questionnaire
Estimated time to complete: 20 minutes.
Shared Code Between Package Managers
Which package-management libraries twenty package managers reuse from each other.
This Week in Package Management: 8 August 2026
Releases, advisories, and articles from across the package management world
The Software Stewardship Lab
A new applied research lab for open source sustainability, launching today
A year of AI disclosure in critical packages
Assisted-By: Daniel Stenberg
brew install actions/checkout
Using Homebrew's tap machinery as a curated distribution layer for GitHub Actions.
This Week in Package Management: 1 August 2026
Releases, advisories, and articles from across the package management world