Dependency Management Data is now a lot easier to work with when using Software Bill of Materials (3 mins read).
Announcing an improved model for interacting with SBOMs, removing the need to understand the Repo Key up-front.
Posts from 9 July 2024
Listened to
Cup o' Go | 🎹 As simple as Do, Re, Mi, Go 1.23 (rc1), baby, you and me!
Post details
Visit our homepage - cupogo.dev - for links to our Patreon, Store, past episodes, and more.🚢 Releases1.23 RC1 released1.22.5 & 1.21.12 pre-release announcementProposals1️⃣ Accepted: cmd/gofmt: change -d to exit 1 if diffs exist🆕 Accepted: list deprecations and newer available dep versions 🪢...
by 
Jamie Tanna
.
Reposted
OpenUK (@openuk@hachyderm.io)
Post details
Attached: 1 image 10 July - Second OpenUK Digital Meet-up! Join Dr Dawn Foster, James Humphries and host Jamie Tanna, in their talks on high-profile forks, their impacts and the challenges of launching a fork. Register https://www.meetup.com/openuk/events/301139203/?utm_medium=referral&utm_campaign=share-btn_savedevents_share_modal&utm_source=link #openuk #digitalmeetup #opensourcelondon
by Jamie Tanna
.
Listened to
Open Source Security Podcast: Episode 435 - polyfill.io - open source is too big to fix
Post details
and talk about the latest polyfill.io mess. Apparently someone took over a very popular project and started to serve malware. First XZ, now this. What does it mean for open source? We don't have any answers, and it's hard to even talk about this problem because it's so big. The thing is though, even if we can't fix open source, it's here to stay. Show Notes
by Jamie Tanna
.