singi-labs/barazo-workspace
pnpm workspace root for Barazo forum development — shared configuration, tooling, and cross-package dependency management
gui.do/barazo-workspace
pnpm workspace root for Barazo forum development — shared configuration, tooling, and cross-package dependency management
Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)
### Summary A path traversal vulnerability in pnpm's binary fetcher allows malicious packages to write files outside the intended extraction directory. The vulnerability has two attack vecto...
Package Managers Need to Cool Down
A survey of dependency cooldown support across package managers and update tools.
Popular npm Packages in the keyv and Cacheable Namespaces Co...
Popular npm packages keyv and cacheable compromised.
Launching QuickDID - Fast, Open Handle Resolution for the AT Protocol - Nick's Blog
QuickDID is a high-performance, open source handle resolution service for the ATmosphere that serves as both public infrastructure at https://quickdid.smokesignal.tools and deployable software under MIT license. It offers flexible caching strategies (memory/Redis/SQLite), scales from single-instance to distributed deployments, and includes production features like rate limiting and proactive cache refresh. Currently a release candidate, it provides a drop-in alternative to Bluesky's resolver while giving developers full control over their handle resolution infrastructure.
npmx - Package Browser for the npm Registry
a fast, modern browser for the npm registry. Search, browse, and explore packages with a modern interface.
What If npm Ran on AT Protocol?
A thought experiment about what a package registry would look like if built on atproto.
quick_cache - Rust
Lightweight, high performance concurrent cache. It allows very fast access to the cached items with little overhead compared to a plain concurrent hash table. No allocations are ever performed unless the cache internal state table needs growing (which will eventually stabilize).
suitenumerique/drive
A collaborative file sharing and document management platform that scales. Built with Django and React.
Fast, disk space efficient package manager
full-network space efficiency update: bad news: event though 84% of all repos are stale (no activity in 30 days), stale repos only make up 20% of the data in the network. moving them to cheap storage doesn't buy much. good news: the data in network is small?? like sub-1TB, minimal magic needed
