As AI coding assistants accelerate software development, one OWASP-backed open-source project is arguing that dependency security tooling still arrives too late to be truly useful.

CVE Lite CLI, a JavaScript and TypeScript dependency vulnerability scanner focused on local lockfile analysis, is positioning itself around a simple idea. Developers should see dependency risks while they are still…

I checked /etc/fstab, and it does not contain anything related to /tmp. Here is a list of the packages installed on my system.

Could this behavior be related to the init system? To test, I changed...

Evidence synthesis at the DEFRA science conference, TESSERA transcoding and building a new SPA, OpenStreetMap/DuckDB bindings in OxCaml, and early thoughts on vibecoding etiquette.

TESSERA streaming in the browser, planetary programming at WG2.8, biodiversity action papers, FP Launchpad opens, and Docker CACM buzz

Got TESSERA working in Zarr and the browser, and a preprint of package management a la carte pushed out

The Debian project releases a new stable version of its Linux distribution approximately every two years. During its life time, a stable release usually gets security updates only, but in general no feature updates.

For some packages it is desirable to get feature updates earlier than with the next stable release. Some new packages included in Debian after the initial release of a stable…

The recent release of more Epstein files only provide more evidence about just how close former Israeli prime minister Ehud Barak and billionaire pedophile Jeffrey Epstein were to each other, despite Barak’s protestations to the contrary.

Former Israeli prime minister Ehud Barak is no longer proud to be associated with Jeffrey Epstein. Yet for many years, new documents show, the pair…