Viewing profile — handstitched

It's a small difference, but if you had a choice between "more efficient AND less maintenance" and "less efficient and more maintenance" then it's easy to see why the permanent-mag…

It's been possible since Big Sur at least, the method for enabling it just changed woth Sonoma

> You don't have to trust us. Git itself verifies every object by hash on the client side. If we flip a byte, git fsck rejects the entire pack. If I were to run 'git clone https://…

Look at the wikipedia page for any given country, and I guarantee you that it cites the CIA World Factbook at least once (and probably several times [1] ). Saying "we don't need th…

This was a great read. I've used the naive approach shown in the first example before and its always felt a bit clunky, but I wasnt aware of most of these language features. I'm de…

> secular culture is literally dying Can you elaborate on this? It doesn't match my experience at all.

> To me, any software engineer who tries an LLM, shrugs and says “huh, that’s interesting” and then “gets back to work” is completely failing at their actual job, which is using te…

OP is the developer & maintainer of the affected packages, so the attacker was able to use their phished credentials to upload compromised versions to NPM.