Package Manager

You Think npm Is Just a Repository. It’s Actually a Battlefield.

Modern software registries are no longer neutral infrastructure; they are critical trust intermediaries. As supply chain attacks threaten the ecosystem, a dangerous tug-of-war exists between community-driven openness and authoritative security control. The real battle isn’t about safetyβ€”it’s about who gets the power to define what code is ‘acceptable’.

Stop Copy-Pasting Makefiles. Make Already Has a Package Manager.

Every developer who uses GNU Make has a dirty secret: they copy-paste Makefile targets between projects like it’s 2009. MKPM, a new GNU Make Package Manager, wants to end that ritual by letting you install and reuse Make targets like npm packages. It’s either the smartest extension of Make in decades or proof that the tool’s legendary simplicity has finally hit its ceiling.