2026-04-25T20:33:46Z https://yabu.me Seth Larson https://yabu.me/npub1xhwh40lc054jjcw69d3tl77a32gtj29katwyl5xvq4kxjv8ytxaqgx9evl https://cdn.fosstodon.org/accounts/avatars/108/194/144/469/322/922/original/a6a100f57fc6dca7.jpeg https://cdn.fosstodon.org/accounts/avatars/108/194/144/469/322/922/original/a6a100f57fc6dca7.jpeg https://yabu.me/nevent1qqsgkfanfdt9sgq3qmxet4guzjyepfyggtmdu9twcmczpgt4w8sg6mgzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5n7dtav In reply to <a href='/nevent1qqstsq4cuf90q6p8m05yun0zcmq7p2jgvcqd8u7m7wp808c0d39a5wq6q7q6r'>nevent1q…7q6r</a><br/>_________________________<br/><br/>The PSF Developers-in-Residence program makes this possible, check out how the <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1vv848aca8vpv9lt2l2tj6wwehw7drwrs2e3ev9693rwz02jh448qcc6fhk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Python Software Foundation</span> (<span class="italic">npub1vv8…6fhk</span>)</a></span> supports the Python ecosystem with full-time staffing: <br/><br/><a href="https://www.python.org/psf/developersinresidence/">https://www.python.org/psf/developersinresidence/</a> 2025-06-03T21:51:25Z https://yabu.me/nevent1qqstsq4cuf90q6p8m05yun0zcmq7p2jgvcqd8u7m7wp808c0d39a5wqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm57akcgp Thanks to the work of Python Release Managers and all the Developers-in-Residence we have a coordinated #Python #security release of all versions for 5 CVEs all in one day (1 critical, 3 high, 1 medium)<br/><br/><a href="https://discuss.python.org/t/python-3-13-4-3-12-11-3-11-13-3-10-18-and-3-9-23-are-now-available/94367">https://discuss.python.org/t/python-3-13-4-3-12-11-3-11-13-3-10-18-and-3-9-23-are-now-available/94367</a> 2025-06-03T21:48:20Z https://yabu.me/nevent1qqs8v5l4f97hv77zardrsxdp50s3u2mreqc6z04n2a9pkq7q22w3v6qzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5lt2qsm I am observing #VolunteerResponsibilityAmnestyDay this Spring and published my list ahead of the date to give you a chance to reflect on your own responsibilities.<br/><br/><a href="https://sethmlarson.dev/observing-volunteer-amnesty-day">https://sethmlarson.dev/observing-volunteer-amnesty-day</a><br/><br/>Thanks to <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1hv5x9ks4guwsvp4e2zg50qsu9kqsnjgsygngr7ams9j2j76jlw9s6zxq0v" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Sumana Harihareswara</span> (<span class="italic">npub1hv5…xq0v</span>)</a></span> for creating this time of intentional reflection. It&#39;s been useful for me to put into words and actions what I have probably needed to do for some time. 2025-05-29T19:18:15Z https://yabu.me/nevent1qqspetvamm8fsv3qmh989k5prk8qtsx8mls6hvh9tzgzl4dtgpkgrzczyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5qn92jg Whoever created this, thank you. This captures the energy of open source perfectly. If you see a problem you can be the one to fix it, and that&#39;s amazing! 💪<br/><br/>#PyCon #PyConUS #PyConUS2025<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/114/524/544/478/930/025/original/843e7e08224bbd53.jpeg"> <br/> 2025-05-17T18:20:03Z https://yabu.me/nevent1qqs2cfm2g96gnkewvvsfjx5y578rgmqgldckhv2qzssk0z6x3qvlgtgzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5zhmz7v Learning about bees from <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1tzzkc53ssevnajzjzt042rc2rv0wysxhyeatvzskt0xpxu5spr3smn5lkc" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Michael Dahlberg</span> (<span class="italic">npub1tzz…5lkc</span>)</a></span> (where is <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1gfxk3mqt70hx3w5j6ackvl5cza68m8ldkna6svfln040e3s7mdgqj3gnlz" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Russell Keith-Magee</span> (<span class="italic">npub1gfx…gnlz</span>)</a></span>?)<br/><br/>#PyCon #PyConUS #PyConUS2025<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/114/519/424/724/422/899/original/eef560bba7ea7f11.jpeg"> <br/> 2025-05-16T20:35:48Z https://yabu.me/nevent1qqs0lj0n9pp0wfx2e8s6jtkldsl45skqdvm7wqpw4f29r9gramdn0qczyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5cmk9cy Cory Doctorow at PyCon US<br/><br/>#PyCon #PyConUS #PyConUS2025<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/114/517/877/612/021/763/original/3f28a1f88ca8f896.jpeg"> <br/> 2025-05-16T14:02:22Z https://yabu.me/nevent1qqsww0p5spm4qnh53fzflsner0ay3smr3lcjq4lc4gt74t5gy7ke82szyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm56kn5ew If you&#39;re interested in software security at #PyConUS I&#39;ve compiled a list of all talks, open spaces, and events related to security! 🐍🛡️<br/><br/>👉 <a href="https://sethmlarson.dev/pycon-us-2025-security-mini-summit">https://sethmlarson.dev/pycon-us-2025-security-mini-summit</a><br/><br/>#pycon #pyconus2025 #python #security #oss #opensource<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/114/511/962/188/601/072/original/c8d9794ea58821f2.png"> <br/> 2025-05-15T12:58:29Z https://yabu.me/nevent1qqsfjymh7gmhser4nwz4qwnln085dl0qxlurzvwnxp4qn0uysd2922czyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm503l9ft <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1vv848aca8vpv9lt2l2tj6wwehw7drwrs2e3ev9693rwz02jh448qcc6fhk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Python Software Foundation</span> (<span class="italic">npub1vv8…6fhk</span>)</a></span> Developers-in-Residence Program now has a landing page! 💜<br/><br/>Today we cover the language runtime and security work, maybe there&#39;s a gap in the #Python ecosystem your organization would like to see worked on full-time at the PSF? Let&#39;s talk!<br/><br/>#security #opensource #oss<br/><br/><a href="https://www.python.org/psf/developersinresidence/">https://www.python.org/psf/developersinresidence/</a> 2025-05-06T15:02:50Z https://yabu.me/nevent1qqsys87n5tk3re3s7xchpnt3zju7smmkpfny0s52uyfrl037fg8v56czyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5sp4mwk In reply to <a href='/nevent1qqsqlr3lu4lnadfelz6r5lhvr43nrmdhn4eteawxlrvy4x8y607qyrqr0zfl0'>nevent1q…zfl0</a><br/>_________________________<br/><br/>Woo! Congrats <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1cssgqz68tuwvp4745dddrswjtnfl26cdvlg2zhrkq0k6cw2vz8nsk0jy3n" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Loren</span> (<span class="italic">npub1css…jy3n</span>)</a></span>! 👏👏👏 2025-05-02T13:28:26Z https://yabu.me/nevent1qqsycr4kuc9xagxl5lvd7d5k5m0pa78wecxhlfzk76rgmgfjevy4j4qzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5lkh09k Regardless of what happens with CVE/NVD, the PSF will continue publishing advisories for CPython through our OSV database and to the security-announce@python.org mailing list.<br/><br/>Please subscribe to those data sources to guarantee delivery of vulnerability data about CPython.<br/><br/><a href="https://github.com/psf/advisory-database">https://github.com/psf/advisory-database</a> 2025-04-15T19:11:54Z https://yabu.me/nevent1qqs8sr24t80lnrxy6njlwwaeau6tjfeznjp3shnzmwlp37jhlqvg2kszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5vtkth7 Did you know that I&#39;m co-organizing a supply-chain security mini-track at the #PyConUS2025 open spaces?<br/><br/>Open source users and maintainers are invited to attend for short talks and discussions with security-interested Pythonistas.<br/><br/><a href="https://sethmlarson.dev/pycon-us-2025-security-mini-summit">https://sethmlarson.dev/pycon-us-2025-security-mini-summit</a><br/><br/>#security #oss #pyconus #pycon 2025-04-14T14:09:21Z https://yabu.me/nevent1qqsgz43xr27lq38mamx96rh6jts9ejxhzfcurzkrfurtv6m5wga8ysgzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5jzk0vp Tomorrow is #FediDonutFriday, don&#39;t miss out! 🍩 2025-04-10T14:03:41Z https://yabu.me/nevent1qqsgyhpve5rnp9snapt9nfc3rwppf25dmm7v9rdyajakelh5wnx5mxqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5qw9g6s So I&#39;m trying out #VIvaldi browser (<span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub19rt082e6rjeam5rrrky2jnkw9yrpz62c4c6uvg56cgg6cmg37atsfwadh9" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Vivaldi Browser</span> (<span class="italic">npub19rt…adh9</span>)</a></span>) on #Ubuntu and I&#39;ll report back with what I think.<br/> <br/>So far the initial setup and tinkering has been going well, I&#39;ve got my password manager, feed reader all setup. Every optional piece of fluff that is &#34;useful for someone but not me&#34; has been dismissable or can be hidden from view. Great initial impression 👍 <br/><br/><a href="https://vivaldi.com">https://vivaldi.com</a> 2025-02-27T15:21:27Z https://yabu.me/nevent1qqsynj8tk7mafkw6ecqalfaxtm8z3e0pyx96969ldjsvnwk7rdaaqxszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5s4wne5 How to turn a Firefox evangelist into a Firefox hater in just one easy step 😠 Mozilla, quit the games. Drop this or I drop you.<br/><br/>EDIT: A less frightening take on this change from someone who probably knows more? <a href="https://infosec.exchange/@ubernostrum/114072117220314039">https://infosec.exchange/@ubernostrum/114072117220314039</a><br/><br/><a href="https://fosstodon.org/<span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1yg8lnapwc8yyd0m32jcfdp7k28hwmsvtsqc59rsj6d6d0m3mynqs7tccz0" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Taggart :ifin:</span> (<span class="italic">npub1yg8…ccz0</span>)</a></span>/114071999402980952">https://fosstodon.org/<span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1yg8lnapwc8yyd0m32jcfdp7k28hwmsvtsqc59rsj6d6d0m3mynqs7tccz0" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Taggart :ifin:</span> (<span class="italic">npub1yg8…ccz0</span>)</a></span>/114071999402980952</a> 2025-02-26T22:08:30Z https://yabu.me/nevent1qqsquyq99t9jhtd9kjkxx80d7ut9jy2dh7ph3zh6aswgy6a8svxzzpqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5s3sr8q Positive action after an investigation, yay! <a href="https://www.404media.co/public-library-ebook-service-to-cull-ai-slop-after-404-media-investigation-3/?ref=daily-stories-newsletter">https://www.404media.co/public-library-ebook-service-to-cull-ai-slop-after-404-media-investigation-3/?ref=daily-stories-newsletter</a> 2025-02-20T14:36:21Z https://yabu.me/nevent1qqsggcw2x8enz9sz0mn74vf7znw49n5rg7jfwfyfdwk2m2k5xhkujwszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm53gdtyx Some really good news: Sovereign Tech Agency (<span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1yng6dx32zrl2qhp2kq26al7uzkwqkugrkaxf4gsycs9r5snrkjdqlznhrk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Sovereign Tech Agency</span> (<span class="italic">npub1yng…nhrk</span>)</a></span>) has announced their first cohort of Fellows, and among them is a friend: <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1xvuu4dsa9acew5d5ua5jpfgr40uefgyheua7c45f62jmguks36wqzsjmp8" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Hugo van Kemenade</span> (<span class="italic">npub1xvu…jmp8</span>)</a></span> 🥳<br/><br/>Congrats Hugo and everyone! Having chatted with Mirko last year I am really excited for this program to show how impactful paying a handful of maintainers full-time can be.<br/><br/>Read Hugo&#39;s blog on the Fellowship: <a href="https://hugovk.dev/blog/2025/im-excited-to-join-the-sovereign-tech-fellowship/">https://hugovk.dev/blog/2025/im-excited-to-join-the-sovereign-tech-fellowship/</a> 2025-02-06T14:35:26Z https://yabu.me/nevent1qqs9zetg45t39vtrk32ulaep9dp3zp6a49fktmpya5w5pegv57euylszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5cke7c0 That time of month again for my uncancellable auto-renewing GitHub Copilot subscription email (despite having never used Copilot or asked for this... :blobcatangery:) Note that there&#39;s no &#34;unsubscribe&#34; button, either.<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/113/948/840/975/144/258/original/2a590225b29d6ee7.png"> <br/> 2025-02-05T02:10:06Z https://yabu.me/nevent1qqszk0ruqxepngeeppx3whpuzayjzt0xw66j07p36prk88rkazg6yyqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm54pr3d7 Chúc mừng năm mới! Happy New Year, everyone! 🐍🧧 2025-01-29T13:04:32Z https://yabu.me/nevent1qqs8hyfqstr6v3d5wy5mkd9r6reqfyp496vc4ztsz6qrg7tudnkdetqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm593pudp The threat of Trump EOs has caused the National Science Foundation to pause grant review panels. Critically for Python and PyPI security I spent most of December authoring and submitting a proposal to the &#34;Safety, Security, and Privacy of Open Source Ecosystems&#34; program. What happens now is uncertain to me.<br/><br/>Shuttering R&amp;D only leaves open source software users more vulnerable, this is nonsensical in my mind given America&#39;s dependence on software manufacturing.<br/><br/><a href="https://www.npr.org/sections/shots-health-news/2025/01/27/nx-s1-5276342/nsf-freezes-grant-review-trump-executive-orders-dei-science">https://www.npr.org/sections/shots-health-news/2025/01/27/nx-s1-5276342/nsf-freezes-grant-review-trump-executive-orders-dei-science</a> 2025-01-28T18:24:53Z https://yabu.me/nevent1qqsfhmpdg883q2aeqjgevp5qrvmsz58ct6jvjxv50h5gr6megglvwqqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5ecy8rc Finally! <a href="https://sethmlarson.dev/how-to-disable-copilot-in-github">https://sethmlarson.dev/how-to-disable-copilot-in-github</a> <br/><br/>Thank you <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1te8autgg59arf0mh8smt34fup3780r5eskhedt360njqfw3hd9qqkcpgc3" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Harry Sintonen</span> (<span class="italic">npub1te8…pgc3</span>)</a></span> for making me aware #github #copilot 2025-01-19T19:01:14Z https://yabu.me/nevent1qqs9u0fm7q8x6sxwqy2duxu2vfspw6jqwhdvt93gsfjz03d6pykmm0gzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5uprmcl In reply to <a href='/nevent1qqsx5grguuv4ne2zd9pcnz3500t9sw8cye5ch0hc52at3r34q8jj7ssnyhakm'>nevent1q…hakm</a><br/>_________________________<br/><br/>diffoscope is one of my favorite little tools! Highly recommended :) 2025-01-16T05:13:46Z https://yabu.me/nevent1qqsd5n2z680ctlk35cpzq2cdfq3lazejqz2gzjpgpeygnwfhnxrfttszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm567m9uh Meta is scared of Pixelfed. This is the biggest endorsement of Pixelfed that I&#39;ve seen so far.<br/><br/><a href="https://fosstodon.org/<span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kxu2qjwefan8sarcerv8cp9mtjtyph09rgqy5dqfhxrlxgqeaeyqw09fca" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Mastodon Migration</span> (<span class="italic">npub1kxu…9fca</span>)</a></span>/113819524021365621">https://fosstodon.org/<span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kxu2qjwefan8sarcerv8cp9mtjtyph09rgqy5dqfhxrlxgqeaeyqw09fca" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Mastodon Migration</span> (<span class="italic">npub1kxu…9fca</span>)</a></span>/113819524021365621</a> 2025-01-13T17:12:03Z https://yabu.me/nevent1qqszsjddwe7x70evzwzrfd89yzwffyvv3axsafq9yetzjncelu7l6gszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5uksc57 I&#39;m giving <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1fh736ae0xzk98s59wggazdpqg0g78mg2rwk7qf87ew96cqhc4lrst3ee83" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Codeberg</span> (<span class="italic">npub1fh7…ee83</span>)</a></span> a spin, really love the idea of a non-profit open source code repository so its members can control. If I enjoy the service enough perhaps I&#39;ll become a voting member.<br/><br/>Anyone have specific features or stories about Codeberg they&#39;d be willing to share?<br/><br/><a href="https://codeberg.org/sethmlarson">https://codeberg.org/sethmlarson</a> 2025-01-11T16:35:56Z https://yabu.me/nevent1qqsqvk2f5uxw0x26chywxruu9gfrt67xfwdh2yxxmk3u82vffr0uklgzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm50q32vk In reply to <a href='/nevent1qqswdaclrqtmfv52ntkcmr6v0ejvzu2dge0czfzfs0jftd9qjy6pxhclcs3s4'>nevent1q…s3s4</a><br/>_________________________<br/><br/>I don&#39;t think the implementation side is difficult either, here&#39;s ActiveState&#39;s: <a href="https://github.com/pypi/warehouse/blob/main/warehouse/oidc/models/activestate.py">https://github.com/pypi/warehouse/blob/main/warehouse/oidc/models/activestate.py</a><br/><br/>The more difficult part is becoming a secure OIDC provider with a sufficient audience to justify the work being done for PyPI. 2024-12-23T20:45:11Z https://yabu.me/nevent1qqswdaclrqtmfv52ntkcmr6v0ejvzu2dge0czfzfs0jftd9qjy6pxhczyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5yjeuzf In reply to <a href='/nevent1qqsds9502d8se7px8xdca4vrcugmvxv6w0xfu4aljakpqvju3eeagus9870xa'>nevent1q…70xa</a><br/>_________________________<br/><br/>Yes! And these docs were used by ActiveState I presume to become their own Trusted Publisher provider. <a href="https://docs.pypi.org/trusted-publishers/internals/#how-do-i-become-a-trusted-publishing-provider">https://docs.pypi.org/trusted-publishers/internals/#how-do-i-become-a-trusted-publishing-provider</a> 2024-12-23T20:41:17Z https://yabu.me/nevent1qqsyl5ye2tf63shh46cvrjknxuxdhh3v9w6m40aah4zxcqgka9l59uqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm50wde9f In reply to <a href='/nevent1qqs0cafn29cshgce49j47k6lax6vcwwasy2k3uqdmy42tmwmxkck69ggvlklt'>nevent1q…lklt</a><br/>_________________________<br/><br/>Happy to chat about the feature! 2024-12-23T20:37:43Z https://yabu.me/nevent1qqs2kvra70q3zcpr42v5efdnph4vv2l4ajq0ylhhn0tze7ayv98ws3czyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm59kq3fj In reply to <a href='/nevent1qqsdz92a0cm4ympwhdszusg3jcs0kyqtmyfu6z3ejns53sj0f8y9ndsd6fye4'>nevent1q…fye4</a><br/>_________________________<br/><br/>Making the transition to a senior engineer makes you wish there was a &#34;Google Doc Wrapped&#34; 2024-12-18T15:58:15Z https://yabu.me/nevent1qqsdz92a0cm4ympwhdszusg3jcs0kyqtmyfu6z3ejns53sj0f8y9ndszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5wqf0hf Now That&#39;s What I Call Wrapped (I don&#39;t listen to music...) :blobfoxcomputer: <br/><br/><a href="https://git-wrapped.com/profiles/sethmlarson">https://git-wrapped.com/profiles/sethmlarson</a><br/> <img src="https://cdn.fosstodon.org/media_attachments/files/113/674/272/920/613/898/original/562b68cc2fd52459.png"> <br/> 2024-12-18T14:21:19Z https://yabu.me/nevent1qqsq278fvp6x9xxqr9lhu4kp46r56g03u2pjsrm2t2hu4uns2gauuqgzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm59rgjt5 In reply to <a href='/nevent1qqsyazp9tu77zljt03aphc4u8zkr8svmfp5557wc9seg33gz6f8q9pqdck40j'>nevent1q…k40j</a><br/>_________________________<br/><br/>haha I was at the game!! My wife advanced to the next round in fantasy playoffs from Moore&#39;s performance too. Was a fun game to be there :)<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/113/666/495/656/986/007/original/23eaa6159c4c5ce2.png"> <br/> 2024-12-17T05:25:40Z https://yabu.me/nevent1qqs0p79km42aad8gzvvhyj86mmpc780l64exle3z3azzmh3wlsu8weszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5dy4kqh In reply to <a href='/nevent1qqsfe7akv2rnxcrk3dlyelnea3e8e2jak7yh2a2qvx06xxn2p7u65vq6f7n8w'>nevent1q…7n8w</a><br/>_________________________<br/><br/>Yeah... maybe this is some excess bemoaning of the use of AI-generated images in articles quoting my article about how AI is being abused. Ho hum 2024-12-13T20:49:44Z https://yabu.me/nevent1qqstfmhzh6w9vf2ntcyjcmn2ars5tqtxw4nz72kanuh4kp05jumx7lszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm58r9pwv In this era of generated AI images for every article, is OpenGraph actually useful? Seems more like everyone does it to maximize screen real-estate, not to enhance signal and understanding of the contained content. 2024-12-13T20:45:40Z https://yabu.me/nevent1qqsxqm2xq2w6l030mfrqtvwsds32atrgkez0qusdcfavkxyp9glr8lqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm59uhne2 In reply to <a href='/nevent1qqsrvuegzetqwknhyqq0dv869uv38vl4t2a8nte0ptmfyd2xaj06rqqa0rrgj'>nevent1q…rrgj</a><br/>_________________________<br/><br/>Yeah but has AI solved all your problems yet? 2024-12-11T14:40:29Z https://yabu.me/nevent1qqsyrrf4h4d7znnptsg6xvd5xxm7yxe9hr8m56r9kks3mntq5atwrcszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5g8h4xt Surprise, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1545e5cp26gheece3ggtv3mmqtcp6pavx2sjfmjr02u0q5tqlxhrse8mva5" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Github</span> (<span class="italic">npub1545…mva5</span>)</a></span> is now pushing Copilot on the home screen 🤢<br/><br/>Keep in mind that I&#39;ve never signed up for Copilot, have disabled Copilot in every way that&#39;s possible, and yet I still have a &#34;Copilot Individual Subscription&#34; which comically has &#34;Enabled&#34; as a text field amongst drop-downs for disabling specific features and buttons for signing up for professional services.<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/113/601/948/471/403/260/original/44c64ece656b5b47.png"> <br/> 2024-12-05T19:51:32Z https://yabu.me/nevent1qqstfxlykg4pv68dykj5vqhp5ckym28qgdx4mdms3e4fqj8cpzz72gszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5anmqzn I&#39;ve noticed a concerning trend of &#34;slop security reports&#34; being sent to open source projects. Here are thoughts about what platforms, reporters, and maintainers can do to push back:<br/><br/>#oss #opensource #security<br/><br/><a href="https://sethmlarson.dev/slop-security-reports?utm_campaign=mastodon">https://sethmlarson.dev/slop-security-reports?utm_campaign=mastodon</a> 2024-12-03T19:16:31Z https://yabu.me/nevent1qqsfhg25500uh66kzga3m4ezslxva0u3vr4j9zgh7ecpp63dnyypcsqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5aak965 In reply to <a href='/nevent1qqsvvzaqul4uqrjv96e5xy7348p7ar2ck5p7ayk60amd9mjc6jelt3sk9gfnf'>nevent1q…gfnf</a><br/>_________________________<br/><br/>As a data point: I&#39;ve been continuing to enjoy your writing as a feed reader, keep it up! 💜 2024-12-02T14:35:14Z https://yabu.me/nevent1qqstv3prcx0fv0vjukuy5sc3ltvln98mqe4t4pgs2cds0d05gusws6szyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5u2axq5 My work on supply-chain security has only been possible through the &#34;Developers-in-Residence&#34; program at the Python Software Foundation.<br/><br/>Security work is unlikely to be anyone&#39;s favorite thing to do with #Python, my job is to do that work! Consider me Python&#39;s security janitor 🧼🫧🧽<br/><br/>You can support my mission! 🚀 The PSF is hosting its end-of-year fundraiser<br/>where direct donations go to lovely programs like the Developers-in-Residence. Thank you for your consideration.<br/><br/><a href="https://www.python.org/psf/donations/2024-q4-drive/">https://www.python.org/psf/donations/2024-q4-drive/</a> 2024-11-22T16:18:25Z https://yabu.me/nevent1qqsx2e49wkwxhqvst02k4n5zk5edxpjn93vw6twg0l7h2neu3l9yjtszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5zssc4f Idle thought, what if Python typing allowed this?<br/><br/>dict[str, any]<br/><br/>🤔 2024-11-21T17:52:40Z https://yabu.me/nevent1qqs8pnhmuh44awq0r70rvd0xfn3pv9luw3tdyrh4cqq7neygwsg4zdgzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5clpj36 In reply to <a href='/nevent1qqsywr9gnt86sjlnvqtdk4rssup3gu658n7mutcafdhhe4dgjaped9g2eetaq'>nevent1q…etaq</a><br/>_________________________<br/><br/>Scorecard was developed with multiple incorrect premises. The key one being that it&#39;s &#34;for&#34; two completely different user groups (OSS maintainers and users), but has the same UI for both.<br/><br/>Instead of &#34;this project has a maintained score of 5&#34; Scorecard could say: &#34;YOU, the user, aren&#39;t contributing: get your hands dirty or pay up&#34;.<br/><br/>If Scorecard had all the features for providing an &#34;interactive per-project&#34; security roadmap without scores, that would be lovely for maintainers! Alas 2024-11-20T17:00:27Z https://yabu.me/nevent1qqs8vu2036ryldcethd9k8uesxa8txh8q2fa9cyxgpl0lxc5tc5ferqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5unz00q Wrote a short guide on how to purchase cheap ROMs from Steam for Genesis and Mega Drive (before they&#39;re removed on December 9th!)<br/><br/>Don&#39;t miss out on $5 Dr. Robotnik&#39;s Mean Bean Machine 🫘<br/><br/>#retrogaming #sega #genesis #megadrive<br/><br/><a href="https://sethmlarson.dev/sega-genesis-and-mega-drive-games-and-roms-from-steam">https://sethmlarson.dev/sega-genesis-and-mega-drive-games-and-roms-from-steam</a> 2024-11-20T14:19:22Z https://yabu.me/nevent1qqsqzma5nrg5nc8t9p578g47hjx2xtdgavhw4d8r8nyq5n9nmuey02gzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5npya3q In reply to <a href='/nevent1qqsthfgd4n8p4cnyf0cu6wrlwht6e46hjzgsg5ehpghyucaahsnuaqs09gfsk'>nevent1q…gfsk</a><br/>_________________________<br/><br/>no not yet, but Matt has some resources and tools for developing for Z80 w/ the E-Reader&#39;s specific APIs.<br/><br/><a href="https://github.com/city41/ereader-system-resources-z80">https://github.com/city41/ereader-system-resources-z80</a><br/><br/><a href="https://github.com/city41/z80-assembler">https://github.com/city41/z80-assembler</a> 2024-11-19T02:54:50Z https://yabu.me/nevent1qqsx6va9j7axnuny9wf55su67l9xsfcc22pm30h822fydn4ju8udmagzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm592rtgn Congrats Matt Greer for solving software distribution! E-Reader card with Solitaire delivered in an envelope by mail earlier today. Love it! 😍 (<a href="https://retrodotcards.com">https://retrodotcards.com</a>)<br/><br/>#gameboy #gba #retrogaming<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/113/507/275/107/254/206/original/2bf96458daec2e71.png"> <br/> 2024-11-19T02:33:46Z https://yabu.me/nevent1qqsph5k6xf4dh35p20c6am6my6ksddvrnnfym58ku36lt6z4tumda5qzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5xu067s Published some early validation results from my &#34;SBOM for #Python packages&#34; project. TLDR: I forked auditwheel and added some rudimentary SBOM record-keeping for bundled libraries and showed that today&#39;s SCA tools are able to use that information out-of-the-box. Full instructions and work in the post:<br/><br/><a href="https://sethmlarson.dev/early-promising-results-with-sboms-and-python-packages">https://sethmlarson.dev/early-promising-results-with-sboms-and-python-packages</a> 2024-11-14T20:02:24Z https://yabu.me/nevent1qqsdh2l3v9scgn5stlan25qtj2a325xskftmru7vqu2qx4gpa8lxeeszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5460zyh It&#39;s frustrating that every announcement for a new security feature that includes the word &#34;GitHub&#34; immediately gets swarmed by comments and conspiracy theories about GitHub.<br/><br/>I&#39;m an anti-monopolist and want there to be a multitude of ways we build open source software, but I believe security features are different: mostly because they are either enabled by default or largely ignored.<br/><br/>GitHub is important to support because it&#39;s where 84% (372,841 / 440,821) of Python packages on PyPI are built. 2024-11-14T18:28:27Z https://yabu.me/nevent1qqspha4fvkg53szt4pr6unkhcwumgjva0dqd99q80fhq353s8puweeczyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5hwq7pq In reply to <a href='/nevent1qqs9kf3vet3twmt95fgyycun0e6n2jya74eepefvzll08jx3v9g02gsz4kfwk'>nevent1q…kfwk</a><br/>_________________________<br/><br/>Yes! I need to link to your post somewhere, really great advice. 2024-11-11T15:44:21Z https://yabu.me/nevent1qqsrxy7gtg4vktukdax3h64zsw7fureg358rhzr8aghhn7n3ggemt5gzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm56nl9xy Today is my 5-year blog-iversary! 😊 Writing had a positive impact on my life, I would love to see more people writing and sharing on the internet. I wrote a few pieces of advice for new prospective writers:<br/><br/><a href="https://sethmlarson.dev/writing-for-the-internet">https://sethmlarson.dev/writing-for-the-internet</a> 2024-11-11T14:50:31Z https://yabu.me/nevent1qqsxn49vtlfaj9hdc48yk548fv6up5ergxnuqnh4ekwytlu76w533mszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5e7nvfz Please enjoy this picture of an e-Reader looking monolithic while getting it&#39;s ROM backed up using an #Epilogue GB Operator.<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/113/448/421/492/846/775/original/b818114b382fddb3.png"> <br/> 2024-11-08T17:11:26Z https://yabu.me/nevent1qqsyr7dg2cvmj70exuan0wehehap55fwj8xhgl6sux2wvq3fk7nrjaczyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5e89xaf In reply to <a href='/nevent1qqstpr99ccsxzuzqtcfh6cl2grrfpaacd4ees5cjxkgpdenk8yxvp0sw5cafn'>nevent1q…cafn</a><br/>_________________________<br/><br/>What an awful default. A star is not a follow, isn&#39;t that the whole point of &#34;following&#34; a repo? 2024-11-05T17:58:42Z https://yabu.me/nevent1qqsrpqazuh87wzcewvf7w3lcjkm6prx4mfmvscvet67l2mlgfnweu8gzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5hcgsg2 Did <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1545e5cp26gheece3ggtv3mmqtcp6pavx2sjfmjr02u0q5tqlxhrse8mva5" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Github</span> (<span class="italic">npub1545…mva5</span>)</a></span> just destroy the homepage feed by making it uncontrollably AI-recommended (and therefore, completely full of things I don&#39;t care about)? Looks like yes. 2024-11-05T17:55:18Z https://yabu.me/nevent1qqsdn2wjy26ljef2dd4whuxs6j5vs2v8s02jnxxw3l29vv63km8heyczyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5vunwl8 In reply to <a href='/nevent1qqs9xmtfnm2esn4kkpzxwxpwkqkudv6qsqgsfddrqqjggcuxzgg082gw5frxs'>nevent1q…frxs</a><br/>_________________________<br/><br/>Oh no worries! I basically want Omnivore back again, it fit the way I wanted to consume the web so cleanly 😢 2024-11-03T21:54:30Z https://yabu.me/nevent1qqs9jhqa0k2d2c48gzlp9w0n7z45mf3wja50h72ey2w2jyrxrm69s8gzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5vdfqw2 In reply to <a href='/nevent1qqsdc4fy3f2e79gnqrq9sgvccagmhkx0d4utvw329g8kgnyg3l52gjcua7q0x'>nevent1q…7q0x</a><br/>_________________________<br/><br/>Is that a read-it-later service? I didn&#39;t immediately see support for pulling in feeds and newsletter articles? 2024-11-03T21:48:07Z https://yabu.me/nevent1qqsppv3n5hz8cctgxe02385ltp223259z8pm553t8f9804zmdtzewnszyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm530skv8 I wasn&#39;t happy with Feedbin&#39;s &#34;read it later&#34; functionality, so I am now trying out Inoreader&#39;s trial. So far so good, the functionality appears to match what I need (feeds, newsletters, read-it-later, tags, and an API) but their API quotas are really aggressive especially for a paid service. Only was able to import 120 of my 160+ feeds for now...<br/><br/>After Omnivore was so suddenly gone I&#39;m feeling the need to encode my work into a format like OPML too instead of only in a service. 2024-11-03T21:39:34Z https://yabu.me/nevent1qqsdxlmkfhh7ww9dfypm7v7jzle4gn7l73pyew0mvtkhvglxhuqcdzqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5qzyw95 In reply to <a href='/nevent1qqs2p6j0t2fp7xt85uq6z097x2z3halrq6z8q8egtd4phwwalw0gemsrwt6ch'>nevent1q…t6ch</a><br/>_________________________<br/><br/>👏 👏 👏 Wish I could like this multiple times.<br/><br/>I never liked this metaphor, I think software graduating to this level of maturity should be celebrated! The challenges are there might not be any &#34;easy&#34; tasks to cut your teeth on or &#34;shiny&#34; development work to attract new contributors. In that way I can see software &#34;dying&#34; due to lack of maintainers.<br/><br/>We need to change our view of meaningful maintenance / stewardship of mature code to be more positive. 2024-11-01T13:37:14Z https://yabu.me/nevent1qqstd0s8pmt0s4lvjs3nl54ytgj459fyadujv7jgknn63x0w58nc93szyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5k7fq80 #Python is #1 on GitHub. #GitHubUniverse<br/> <img src="https://cdn.fosstodon.org/media_attachments/files/113/392/220/970/207/419/original/18de8d17b17308d4.jpeg"> <br/> 2024-10-29T18:53:19Z https://yabu.me/nevent1qqs0rhtap9v9fjam04kyv99x7cvez07usz03zgeqytqghvqep3wuzwgzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5dsuqt9 In reply to <a href='/nevent1qqs8yc3dq6nr5hkkste6zjznxl77atsfn0ncg2palgmcnnyyy8sn76gjazkdx'>nevent1q…zkdx</a><br/>_________________________<br/><br/>If it&#39;s happening enough to justify you might make the logo a QR code (with the real logo embedded, of course). Perhaps you could switch the logo to the QR version only on desktop (based on screen size) since presumably if you&#39;re already on mobile you&#39;re unlikely to be able to scan the QR code on your own. 2024-10-24T13:43:13Z https://yabu.me/nevent1qqsw6u963d4g400eyyhv4gkgwmehlvge7fnn9v3705y36l48vqy6cuczyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm56yelk7 In reply to <a href='/nevent1qqsp0l74w6472wfk6ppd9d62r46kagg6347285hnpdmwsk0ha5fr4lsm5jy40'>nevent1q…jy40</a><br/>_________________________<br/><br/>This setup is incredible, nice work! I&#39;ve started sharing my slides and references right at the beginning of the presentation via QR code and folks seem to really enjoy the experience. 2024-10-24T13:34:24Z https://yabu.me/nevent1qqsge6th3hj4zumtvawkad855d6jt9jx60pklvgngx9c0at9dl6zp9szyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5xtzsln In reply to <a href='/nevent1qqsgerk4rdulzcrh44an2r22zf80k37rmcdk0w6yt35y9tyh6f7gg3q59j4lq'>nevent1q…j4lq</a><br/>_________________________<br/><br/>What an awesome idea, I would love to see this done for PyCons too (there are just so any it&#39;s hard to keep track of them all when they upload VODs!) 2024-09-28T01:19:02Z https://yabu.me/nevent1qqsqrl928x0jtjy74gv8vfw2xm79feu5s4hea06pjvf7cnhg0805llgzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5plvqcf This is the kind of EV tech I&#39;m rooting for: <a href="https://restofworld.org/2024/electric-vehicle-conversions-uruguay/">https://restofworld.org/2024/electric-vehicle-conversions-uruguay/</a> 2024-09-12T02:40:02Z https://yabu.me/nevent1qqsz4q6mjpc6w60z7myarqjrynuf3yjrszy9ggjnjvkyn6j0qclcw4czyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5res6mf Another shining example of #opensource ecosystems collaborating through open standards and implementations! 🥳 <br/><br/>Rust has an RFC for Trusted Publishers based on PyPI&#39;s implementation and the implementers guide <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub17jk47q8zu3jlm93syn8sm3kzj2nju2g4anekz9nkxmu9qnq9ln2sa7g7cv" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Zach Steindler</span> (<span class="italic">npub17jk…g7cv</span>)</a></span> and I coauthored for the OpenSSF Securing Software Repos WG:<br/><br/><a href="https://github.com/rust-lang/rfcs/pull/3691">https://github.com/rust-lang/rfcs/pull/3691</a> 2024-09-10T17:57:49Z https://yabu.me/nevent1qqsp9txgyx07clakfp6q530dvjqcu8e3j0llq3ygvaamltvaks5r55czyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5p2qflu In reply to <a href='/nevent1qqs0w9e59x5y9cq59g96vzw89fq0tj0t0qxxx5ya2zjvv5e42eamfwq79qpve'>nevent1q…qpve</a><br/>_________________________<br/><br/>I haven&#39;t adopted uv anywhere for similar reasons. 100% agreed on money being the magic, it turns out you can do a whole lot with 8 hours a day. 2024-09-07T02:39:37Z https://yabu.me/nevent1qqstp23s2rf8eh28lex956mq0pvjanmhxr7585699pksz5qffqqa4jczyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm505uxuq Per the latest #Python Developers Survey:<br/><br/>37% of respondents said they&#39;d contributed to an open source project in the past year! 🤯<br/><br/>This is an incredible result for #Python, open source relies on folks contributing back so I am feeling hopeful for our ecosystem 😊 <br/><br/><a href="https://fosstodon.org/@ThePSF/113045617381785895">https://fosstodon.org/@ThePSF/113045617381785895</a> 2024-08-29T13:59:51Z https://yabu.me/nevent1qqsfadsf2545mn5kxndkhujzhf29kw7xkdkd2ad769jch2vmu66r5cqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5vn7a3v Last week the White House published its summary of the Request for Information on OSS security, and there&#39;s a lot to be excited about! 🤩<br/><br/><a href="https://www.whitehouse.gov/oncd/briefing-room/2024/08/09/fact-sheet-biden-harris-administration-releases-end-of-year-report-on-open-source-software-security-initiative-2/">https://www.whitehouse.gov/oncd/briefing-room/2024/08/09/fact-sheet-biden-harris-administration-releases-end-of-year-report-on-open-source-software-security-initiative-2/</a> 2024-08-12T15:57:30Z https://yabu.me/nevent1qqsrl26n055pm92j38a0x0gzzh4dxy86p70x0tttn7tcz3fnkd8w5kqzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm56gut89 In reply to <a href='/nevent1qqs259z8pygaustngncnjwpuqlsassnztzuz5p35jdq9nz53ch00hxgauk8yz'>nevent1q…k8yz</a><br/>_________________________<br/><br/>man, I need a micro blog... 😅 2024-08-07T03:30:50Z https://yabu.me/nevent1qqsgemfr8m8fdg8qhemfx4g2el6nqys5gt5gxrrgf95c2rs49eccw7gzyq6a674llp7jk2tpmg4k90lmmk9fpwfgkm4dcn7seszkc6fsu3vm5ceu2mf I authored a new guide about implementing Trusted Publishers! ✨<br/><br/>This guide was written with help from many folks at the OpenSSF Securing Software Repos WG (thank you!) If you maintain a software package repo or are interested in how Trusted Publishers works, give it a read 😊<br/><br/><a href="https://openssf.org/blog/2024/08/05/new-guide-for-package-repositories-to-adopt-trusted-publishers/?utm_content=302874134&amp;utm_medium=social&amp;utm_source=twitter&amp;hss_channel=tw-1290363651162021888">https://openssf.org/blog/2024/08/05/new-guide-for-package-repositories-to-adopt-trusted-publishers/?utm_content=302874134&amp;utm_medium=social&amp;utm_source=twitter&amp;hss_channel=tw-1290363651162021888</a> 2024-08-05T13:52:03Z