GitHub Actions has a package manager, and it might be the worst(nesbitt.io)

408 points by robin_reala 10 months ago | 236 comments

Andrew Nesbitt's blog post arguing GitHub Actions functions as a package manager lacking lockfiles, integrity hashes, and other supply chain safeguards.

Quicksort with Jenkins for fun and no profit(susam.net)

117 points by todsacerdoti 2 years ago | 37 comments

The surprising struggle to get a Unix Epoch time from a UTC string in C or C++(berthub.eu)

116 points by PascalW 1 year ago | 67 comments

Startup Winter: Hacker News Lost Its Faith(vincentschmalbach.com)

427 points by vincent_s 1 year ago | 306 comments

Blog post by Vincent Schmalbach arguing that Hacker News commenters have shifted from supporting failed founders in 2013 to cynicism about startups in 2025.

I watched Gemini CLI hallucinate and delete my files(anuraag2601.github.io)

269 points by anuraag2601 1 year ago | 321 comments

After 3 Years, I Failed. Here's All My Startup's Code(dylanhuang.com)

468 points by gniting 1 year ago | 210 comments

Blog post by Dylan Huang announcing the shutdown of his developer tools startup Konfig after three years and open-sourcing its entire codebase.

My approach to building large technical projects (2023)(mitchellh.com)

332 points by mad2021 1 year ago | 47 comments

Mitchell Hashimoto's 2023 blog post on staying motivated through large technical projects by ordering work so real, demoable results come continuously.

Upcoming breaking changes for npm v12(github.blog)

459 points by plasma 4 months ago | 189 comments

GitHub Changelog post announcing upcoming breaking changes in npm version 12.

I've built my first successful side project, and I hate it(switowski.com)

1399 points by switowski 2 years ago | 395 comments

A blog post by Sebastian Witowski recounting how his 2020 side project earned over $15,000 but became a maintenance burden he grew to hate.

NPM debug and chalk packages compromised(aikido.dev)

1287 points by universesquid 1 year ago | 699 comments

Aikido Security blog post reporting that the popular npm packages debug and chalk were compromised with malicious code in a supply-chain attack.

Git 3.0's upcoming SHA-256 default will be a costly mistake(blog.gitbutler.com)

536 points by chmaynard 24 days ago | 502 comments

Blog post by Scott Chacon on GitButler's Butler's Log arguing that Git 3.0's switch to SHA-256 as the default hash will be a costly mistake.

Doing Rails Wrong(bananacurvingmachine.com)

324 points by treesenthusiast 1 year ago | 206 comments

A blog post written as a satirical dialogue about overcomplicating Rails 8 apps with Vite, Node, and npm instead of Rails' built-in tooling.