Fewer keys under the doormat: why trusted publishing matters for Open VSX
Every software registry eventually learns the same lesson: the most valuable thing in a publishing pipeline is not the code...
supply-chain
The 3F's framework, Conviviality, and our relationship to dependencies
As usual, FOSDEM 2025 was associated with a bunch of fringe events happening before and after the crowded conference. Among...