From the notebook

package-management.

2 notes on this topic.

1,500 poisoned packages in the Arch User Repository

The Arch Linux team spent the weekend cleaning up more than 1,500 malware-laden packages from the AUR. The scale is what surprised me.

PHP's dependency manager is rolling out cryptographic signatures. The timing matters more than the tech.