🚨 Open source supply chain attacks are exploding. Starting today, that ends. We’re releasing Socket Firewall — FREE, zero-config, CLI that blocks malware before it lands on your laptop or CI. Just run: npm i -g sfw sfw npm install lodash Works for: npm, yarn, pnpm, pip, uv, and cargo.

Maintainer compromises used to be rare. Now they’re happening at an alarming rate, as seen in recent attacks. Today we’re giving developers a new layer of defense with Socket Firewall, a free tool that blocks malicious dependencies at install time.

The actions that Trump has taken against marginalized people are inarguably worse but, for some reason, the thought that they’re pursuing the liquidation public lands (read as "sell off national parks to be privately developed") really hurts my heart.

Thanks @mapquest.com!

Ok here’s a thread of feeds that aren’t topic themed but utilitarian and do things like show you different versions of your timeline or provide services that should be official Bluesky features. 🧵

Our current energy system is extremely wasteful. More than 2/3 of primary energy inputs end up as waste heat. Yet the customer has to pay for all of the energy in the left hand side of this chart to get the small amount of energy converted to energy services.