Recently a security hole in a certain open source Java library resulted in a worldwide emergency kerfuffle as, say, 40% of the possibly hund...
Have you seen this? If you haven't, you should. I think everyone needs to. Wealth inequality on a scale this extreme is almost impossible to explain. You have to experience it to understand. Go ahead. Try it out. Where is the top of this graph? Good question. Keep scrolling
“Fuck you you fucking whore. Fuck you”. A text I received from a colleague I was told was “too valuable to reprimand". I'm so tired of ...
Before the AI era, I wrote pretty long commit descriptions (or commit bodies) for major changes. It took me about five to ten minutes to draft and reread them to make sure I didn’t miss anything important. I did that for several reasons.
As a Renovate maintainer, the question I answer most often is not “why is Renovate broken?” but “why did Renovate do that with my config?”. The honest answer is usually “because you configured it that way”, and finding out where is the hard part. Every one of these mysteries ends the same way: you pull off the mask, and it was a packageRule all along. The Renovate Config Debugger is my attempt to make that answer visible before Renovate runs.
If someone asks you a question, paste your answer — not the chatbot's.
In early February 2011 Egypt was in the middle of a political revolution. One morning, everyone's phones suddenly pinged with an alert. The Armed Forces asks Egypt's honest and loyal men to confront the traitors and criminals and protect our people and honour and our precious Egypt. A series of messages arrived all ostensibly from the network provider Vodafone. All pro-regime and all with the…
Homebrew is thriving while other open source projects struggle. Its scarcest resource isn’t money: it’s maintainer motivation.
A running list of reasons to have your own website in 2026.
Finding the vulnerabilities is the easy part
Writing about the big beautiful mess that is making things for the world wide web.
Giving dependencies the same treatment the fork got
GitHub is updating how GitHub Actions’ pull_request_target and environment branch protection rules are evaluated for pull-request-related events. These changes will take effect on 12/8/2025. They aim to reduce security critical…
Supply chain attacks exploit fundamental trust assumptions in modern software development, from typosquatting to compromised build pipelines, while new defensive tools are emerging to make these trust relationships explicit and verifiable.
It seems so rude and careless to make me, a person with thoughts, ideas, humor, contradictions and life experience to read something spit out by the equivale...
Fool me once, shame on you; fool me twice, shame on me.
A lightweight way to add ambient social cohesion for remote teams.
The difference can be subtle
Automating things, even when it doesn't save time, is how you learn the skills to automate the things that will.
Too many open source projects suffer from inadequate documentation, and that hurts their adoption, their communities, and puts more burden on maintainers. Many people who create open source software don't see see themselves as writers, but today I'm sharing tips for documenting open source projects
I’ve been working for over 20 years in the field of “developer experience,” where we help developers be more effective, efficient, and happy, by improving tools, systems, and processes. I have been intimately involved in designing key aspects of the developer experience at Google and LinkedIn, have been very involved with the research community in this space, and I’m constantly in touch with developer experience leaders at every major tech company. I’d like to spell out for you the fundamental principles of what makes a great developer experience—the most important things to understand in the space. I’m only going to
Please, make it stop.
The description suggests that this is some kind of extended metaphor about work. It appears to be written in that _Choose Your Own Adventure_ style second-person voice, yet there are no choices to be found within. Against your better judgment, you follow the link.
Overworked, under pressure, and subjected to abuse – is it really worth it?
OpenAPI is hard. At a glance it might seem really straight forward to build tooling for it, but then we learn there are monsters down below.
Security Okay, friends. Here’s what we’re going to do. It’s not going to take long.Let’s install Signal. Signal is an open-source, end-to-end encrypted instant messaging app. When you message someone …
It’s been over a year since one of the most significant turning points in my life, and it’s time to reflect on that.
Don’t be tricked into writing software that hurts people.
Over the last three and a half weeks I’ve become such a potato that I’m considering changing my name to Maris Piper
An infrastructure engineer, focused on distributed storage system
Do you work in Software Engineering, and have you seen messages or sentences like these before?
How geopolitics can alter digital infrastructure
<p>Folks, today's the day.</p> <p>As of this morning, I've made over a million dollars on GitHub sponsors. Wowoweewow.</p> <p><img src="/pos...
Elastic is adding AGPL as an open source license option to Elasticsearch alongside ELv2 and SSPL....
Hugely awesome work related news!
How could our tools change to reduce the cost of breaking changes?
Writing about the big beautiful mess that is making things for the world wide web.
Replacing Twitter is not a task for a few—it is a barn raising that the entire social community must undertake together. Here’s my tips for joining this change.
Every post of kind bookmarks, by when it was posted. The brighter a month, the more was posted that month.