If It Quacks Like a Package Manager(nesbitt.io)

41 points by jandeboevrie 7 months ago | 5 comments

GitHub Actions has a package manager, and it might be the worst(nesbitt.io)

408 points by robin_reala 10 months ago | 236 comments

Andrew Nesbitt's blog post arguing GitHub Actions functions as a package manager lacking lockfiles, integrity hashes, and other supply chain safeguards.

The C-Shaped Hole in Package Management(nesbitt.io)

34 points by tanganik 9 months ago | 39 comments

Workspaces and Monorepos in Package Managers(nesbitt.io)

18 points by Couto 9 months ago | 3 comments

Writing a Package Manager(antonz.org)

146 points by celiktom 3 years ago | 72 comments

GitHub Actions is the weakest link(nesbitt.io)

210 points by dochtman 6 months ago | 68 comments