Package management is a wicked problem (nesbitt.io)

Screenshot of nesbitt.io: Package management is a wicked problem

First screen, captured 9 months ago.

Looks similar

Screenshot of nesbitt.io: The C-Shaped Hole in Package Management

The C-Shaped Hole in Package Management (nesbitt.io)

34 points by tanganik 9 months ago | 39 comments

Screenshot of nesbitt.io: If It Quacks Like a Package Manager

If It Quacks Like a Package Manager (nesbitt.io)

41 points by jandeboevrie 7 months ago | 5 comments

Screenshot of nesbitt.io: Workspaces and Monorepos in Package Managers

Workspaces and Monorepos in Package Managers (nesbitt.io)

18 points by Couto 9 months ago | 3 comments

Screenshot of antonz.org: Writing a Package Manager

Writing a Package Manager (antonz.org)

146 points by celiktom 3 years ago | 72 comments

Screenshot of nesbitt.io: GitHub Actions has a package manager, and it might be the worst

GitHub Actions has a package manager, and it might be the worst (nesbitt.io)

408 points by robin_reala 10 months ago | 236 comments

Andrew Nesbitt's blog post arguing GitHub Actions functions as a package manager lacking lockfiles, integrity hashes, and other supply chain safeguards.

github-actions package-managers supply-chain-security dependency-resolution

Screenshot of nesbitt.io: Package managers need to cool down

Package managers need to cool down (nesbitt.io)

44 points by zdw 7 months ago | 39 comments

Looks similar

The C-Shaped Hole in Package Management(nesbitt.io)

If It Quacks Like a Package Manager(nesbitt.io)

Workspaces and Monorepos in Package Managers(nesbitt.io)

Writing a Package Manager(antonz.org)

GitHub Actions has a package manager, and it might be the worst(nesbitt.io)

Package managers need to cool down(nesbitt.io)