Be careful out there friends. If you can, pin to specific known-good, untouched, versions of your dependencies.

There seems to be an ongoing supply chain attack or suspicious activity on NuGet .org, where a user called darklord is trying to gain legitimacy or something by sending thousands of become owner of their packages requests, don't accept, report to @nuget.org #dotnet #nuget

Attention NuGet package owners! There is highly suspicious activity. Many users are receiving invitations to become co-authors of TestPackage.Security.Research from a user named darklord, or to join an organization. Do NOT accept these invitations under any circumstances. #dotnet #nuget #mvpbuzz

Looks X just wiped itself off of the Internet. And I'm sure that all 4 of the bots that are left there are sorrly missed.

𝗣𝗼𝘀𝘁 𝟭/𝟱: Two conversations this week—one on code quality tools, one on leadership— revealed complementary truths. Technical excellence requires both rigorous measurement AND psychological safety. Neither alone creates sustainable high-performing teams. You need both.

Bought a @dbrand.bsky.social Killswitch case, skin, and stick grips for my Legion Go S. You're encouraged to watch the installation video before installing (parts of it are non obvious), and suddenly www.youtube.com/watch?v=NPYy... (Should jump directly to 374 seconds) They get me, they really do.

𝗣𝗼𝘀𝘁 𝟭/𝟲: Been reflecting on Brené Brown's "Dare to Lead" and what it means for technology teams. Her research on vulnerability, empathy, and courage offers surprisingly practical frameworks for the modern workplace. Full post:

Pro tip for if Claude Code can't detect that a tool it calls has completed: hit CTRL+O to view the output. For some reason, this tricks Claude into "seeing" that the tool has, indeed, complteted.

𝗣𝗼𝘀𝘁 𝟭/𝟳: How do you maintain code quality across massive .NET codebases? Patrick Smacchia joined The Modern .NET Show to discuss NDepend, the static analysis tool he's been developing since 2004. dotnetcore.show/season-8/nde...

𝗣𝗼𝘀𝘁 𝟭/𝟰: Week reflection as we start 2026: measurement, improvement, and what actually matters. 2025 brought achievements worth celebrating. But the real measure isn't awards or download counts—it's client problems solved and value delivered.

This. If you work in technology, you owe it to yourself to read this. I've seen too many people who were "feature pushers" promoted before they were ready because it's not about pushing features. Don't just jump because they said so. You need to consider everything. elliotmorris.net/blog-a-day-3...

1/4 I have a genuine question for the folks who consume episodes of The Modern .NET Show: Accessibility notwithstanding, do you read the episode transcripts found on the website? Transcripts take time (and/or money) to create, and I'm happy to do it for those who need them. #podcastQuestion

𝗣𝗼𝘀𝘁 𝟭/𝟱: Two quick wins to start 2026: 1. Clean up .NET 10 coverage reports 2. Try Visual Studio 2026 public preview Both address common developer frustrations with simple, actionable solutions.

S08E10 - NDepend with Patrick Smacchia: Scaling .NET Code Quality In this episode of The Modern .NET Show, Jamie Taylor welcomes back Patrick Smacchia, founder of NDepend, to discuss static code analysis and how it can be a game-changer for .NET developers – especially when tackling complex legac

Paul knocking it out for the park again, with more top quality apps. If you work with #Umbraco, you should check this out 👇

Me: Hey npm, audit my package.json npm: found 1 high vulnerability Me: OK. Fix it npm: Fix applied Me: audit again, please npm: found 11 high vulnerabilities Ugggh. To be fair, the same thing happens in other ecosystems.

𝗣𝗼𝘀𝘁 𝟭/𝟲: "We're Agile, but it takes six weeks to get a simple change to production." Most "Agile" teams are doing Waterfall in two-week chunks. They've adopted ceremonies but missed the essence: rapid delivery of value. DORA metrics reveal what's actually broken:

Animation Studio: "We need a soundtrack for out 2 episode OVA with 90 minutes of runtime. " Musicians: "Here's 6 albums of music, two CDs of songs for the VAs who want to break into music, and I'm on hand for the audio drama CD. And it's all absolute bangers." One of the many reasons I love anime.

One of the unsung heroes of the #dotnet ecosystem just turned 7 years old jellyfin.org/posts/state-...

HeroDevs has joined Microsoft, Canonical, and Red Hat as a member of the .NET Security Group www.herodevs.com/blog-posts/h...

I've still got it. RE 2 '98 on Legion Go S Steam Edition.

F www.theguardian.com/games/2026/j... Whether you were a Sega fan or not, Rosen's company changed business and pop culture in ways most people can only dream of.

𝗣𝗼𝘀𝘁 𝟭/𝟲: Happy New Year! Time for RJJ Software's 2025 wrapped. What an extraordinary year. Three awards, international expansion, 1.6M+ OwaspHeaders.Core downloads, 1.25M+ podcast downloads, 48 blog posts, and clients across seven industries. rjj-software.co.uk/blog/from-st...

"Every bully I ever met can't shut his f"*ckin mouth... Except when he's afraid." - Seth Bullock #NoContextDeadwood

Daft Punk continue to amaze me www.madebywindmill.com/tempi/blog/h... tl;dr -> Harder, Better, Faster, Stronger might be recorded at 123.45 BPM. And considering that part of Interstellar 5555... Genius.

If you have a podcast, you should definitely reach out to Arielle about this offer 👇! One of the best in the business, for sure.

Another top-quality piece of advice from Safia. I'll be adapting this for my workflow going forward.

I think I'm officially tired: rjj-software.co.uk/blog/from-st... And that doesn't include the fact that I bought a house, dealt with no internet connection for three months, and still found the time to read 23 books. And now I sleep.

𝗣𝗼𝘀𝘁 𝟭/𝟰: Week reflection: three distinct but connected themes in modern software development. Technical precision (code coverage), leadership philosophy (infinite game), and tooling excellence (Visual Studio 2026). The common thread: focus on signal over noise.

Out of office is one, social apps deleted (temporarily). See y'all in 2026.

Mental health is important - take care of yourself 💙

𝗣𝗼𝘀𝘁 𝟭/𝟳: New episode with Mads Kristensen about Visual Studio 2026 (Dev 18), currently in public preview. Some genuinely transformative features that could change how you develop. dotnetcore.show/season-8/unp...

I'm sensing a theme... #Musicolet #Mostplayed

𝗣𝗼𝘀𝘁 𝟭/𝟲: New blog post on Simon Sinek's "The Infinite Game" applied to technology leadership. Technology leadership isn't about winning quarters. It's about enabling teams, advancing causes, and keeping the game going. rjj-software.co.uk/blog/continu...

Yo! I recently worked with Justin Garrett on an episode of the new #MVPUnplugged series! In this episode, I demonstrate how I built a social app using a mix of #GitHubSpark, #GitHubCopilot Agent Instructions, @avaloniaui.net and @vscode.dev youtu.be/2EJR1xhTtBs #MVPBuzz

𝗣𝗼𝘀𝘁 𝟭/𝟱: .NET 10's extensive code generation creates a hidden problem in coverage reports. After adding Coverlet to our Azure DevOps pipeline, coverage reports included Microsoft.AspNetCore.OpenApi.Generated and other framework namespaces—all showing 0% coverage.

𝗣𝗼𝘀𝘁 𝟭/𝟰: Week reflection on attestations and software supply chain security. The core principle: in a world where supply chain attacks are rising exponentially, "trust me" isn't a security strategy. Attestations provide cryptographic proof, not promises.

𝗣𝗼𝘀𝘁 𝟭/𝟱: Attestations are shifting from "nice to have" to mandatory. Regulatory landscape: • EU Cyber Resilience Act • US Executive Order 14028 • Industry standards (SLSA framework) If you're selling software to enterprises or governments, attestation requirements are already here.

In celebration of the stealth release of the trailer for the new Street Fighter movie, can I recommend you give this podcast episode (about the original movie) a listen? It's a ton of fun, honest. wafflingtaylors.rocks/2020/12/11/s...

S08E09 - Unpacking Visual Studio 2026: New Features, Bug Fixes, and What's Coming Next with Mads Kristensen Join Mads Kristensen, the PM on the Visual Studio team at Microsoft, as he discusses the latest updates and features of Visual Studio 2026 public preview, including AI-powered debugging and

The problem with having a team of senior developers (with no mid or juniors) is that you end up of a platoon of squad leaders without any squads. Go ask anyone who has served, and they'll tell you exactly how that works (in that it doesn't).

And incredibly well deserved too. Here's to more success for Mega Ran.

Wow. It’s YA BOY on the front page of Apple Music Kids. What the what?? This ride has been…. Monumental. Buddys still climbing!

𝗣𝗼𝘀𝘁 𝟭/𝟱: Let's talk about implementing attestations in the real world. I hear the same objections every time: "seems like overkill," "will slow deployments," "we don't have expertise." Here's why those concerns don't hold up and how to actually implement attestations:

My year 2025 in podcasts. #AntennaPodEcho

It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect!

𝗣𝗼𝘀𝘁 𝟭/𝟲: "How do you know this is the same code that passed security review?" A CISO's question during an audit exposed a critical gap: the team couldn't cryptographically prove the binary in production matched the reviewed code. New blog post on attestations:

A strange coincidence: My Mum stopped by at the weekend and handed me a "TSB FirstSave" savings booklet that my Nan set up for me shortly after I was born. Listening to the Dec 4th, 2025 episode of the cunningly named @martinlewis.moneysavingexpert.com and they mentioned Post Office savings books.

Take a look at this blog post, if you're hosting #dotnet or #java apps on a Linux based system. It's all about the OOM (Out Of Memory) system and how you can optimise it for your apps. linuxvox.com/blog/what-is...