Featured article
Modern Software Registries are a Trust Service
A modern software registry is increasingly a trust service. Public registries like npm and PyPI provide identity, provenance, discovery, policy, short-lived signing, and reputation. They were built as open catalogs: anyone can publish, names are first come first served, and trust is something the consumer infers after...
Videos
-
“Don’t Submit Code You Don’t Understand”: Angie Byron on AI and Open Source Trust
-
Why the Gateway Approach to Agents Sucks (and What to Do Instead) with Marek Poliks
-
Where Crochet Meets Code: Fiber Arts and the History of Computing with Abbey Perini
-
Charity Majors on AI, Determinism, Instrumentation, & Eating Your Broccoli
