Is it just me, or does Python still not have a real mitigation versus Dependency Confusion attacks? PEP 708 seems kind of dead?

Meanwhile JVM repositories have been verifying group ID ownership (largely via domain control) since... forever? Even NPM sort of has it together with scoped packages.

I run a coding interview where we ask the candidate to not use AI. Have had several candidates seemingly ignore this and type in the optimal solution with no thought. But my favourite is when someone clearly uses an AI, gets a buggy solution, and is totally unable to fix it. Instant karma.

An oft-overlooked facet of the Bezos API mandate:

[...] the team must plan and design to be able to expose the interface to developers in the outside world. [...]

This single-handedly prevents a ton of unhealthy coupling between internal services. Want to use other services' IDs in yours? Too bad.

I saw this title and thought, "Wow, first Go gets generics and now it gets Either? They've really made progress!"

Dear reader, they have not.

go.dev/blog/error-s...

I migrated my Scala OSS libs to central.sonatype.com from OSSRH (which is shutting down at the end of June), and it was actually pretty easy using sbt-ci-release. Kudos to @eed3si9n.com for the support there and in SBT.

I'm a relatively wealthy person living in a great city that sometimes struggles to maintain its infrastructure and services due to lack of funding. Of course I am willing to donate to help out!

At least this is what I tell myself after getting a parking ticket.

Look, nested methods are great sometimes. But if you nest 10 methods, each many hundreds of lines, inside a single method, we are going to have words.

That sinking feeling when a critical SaaS vendor is a little _too_ responsive to your issues (proactively solving them!), even though you pay them very little.

I'll just put this here. Tried it last night, I like it better than Woodford! okanaganspirits.com/products/whi...

As a Canadian it sure feels like mom and dad are getting a divorce. Here's hoping mom gets custody, because Trump's America has morphed into an abusive father.

www.theguardian.com/us-news/2025...

There are times when I think I would choose AWS over GCP just to avoid gRPC and protobuf.

oh hello. Enjoy this pic of my new-ish bike I guess? I'm sure I'll be back to blabbing about software in no time.