Seattle's light rail & streetcar lines carried 4.8 million riders in April—a 44% increase above March, after Link Line 2 was extended to connect Seattle & Bellevue across Lake Washington. Seattle's light rail & streetcar lines are now the most-ridden in the nation, above LA, Boston, or San Diego.

🚀 Wow, this is finally happening! npm plans to block postinstall scripts by default in a future release In the near future (phased rollout), we will likely get a warning github.com/npm/cli/pull...

Npm registry sets stage for more secure package publishing

shipped three new build warnings so your dotnet SDK can finally tell on itself. you're welcome jamiemagee.co.uk/blog/a-new-w...

npm staged publishing has shipped 🎉 Your CI can now stage a publish without 2FA, but a human still has to approve it with a hardware key before anything goes live on the registry. Stolen npm tokens stop being game over. Big deal for the Shai-Hulud class of worm. docs.npmjs.com/staged-publi...

Heads up maintainers of packages, this is a big deal: github.com/orgs/communi...

I'll be speaking at the Open Source Summit on Tuesday at 11:55 about how Clearly Defined can enhance your SBOMs and make license data actionable. I'll also be at the Microsoft booth on Monday morning. See you there! osselcna2026.sched.com/event/2JQvf/...

Just opened an npm RFC to make dependency install scripts opt-in by default. The thing about install scripts: they run the moment a package lands in your dep tree. No require, no review. That's why Shai-Hulud, chalk/debug, and Axios all used them. github.com/npm/rfcs/pul...

Debian Release Team: Debian Must Now Ship Reproducible Packages - https://www.phoronix.com/news/Debian-Must-Ship-Reproducible

From LLMs to the supply chain to hardware and beyond, Nix is the right tool—and paradigm—for our time. In our new post, CEO @grahamc.com lays out why he thinks the Nix moment is upon us and how DetSys is leading the way. determinate.systems/blog/the-nix...

2.0.0 is released 🎉 github.com/package-url/...

Ubuntu 26.04 LTS officially released!!! Download ubuntu.com/download/des... Release info documentation.ubuntu.com/release-note...

TypeScript 7.0 Beta is here! Built on a new native and parallelized foundation, it's already being used on multi-million line codebases. Read up more here and try it on your projects today! devblogs.microsoft.com/typescript/a...

Incredible use of AI guinndex.ai

I built Nix flake support for Dependabot and it shipped today 🚀 Just add package-ecosystem: "nix" to your dependabot.yml and it'll open PRs for each outdated flake input. github.blog/changelog/2026-04-07-dependabot-version-updates-now-support-the-nix-ecosystem/

Reminds me of this classic shinesolutions.com/2018/01/08/f...

TypeScript 6.0 is now available! This release brings better type-checking for methods, new standard library features, new module features for Node.js, and more! But most important, this release brings us one step closer to the upcoming native-speed 7.0! devblogs.microsoft.com/typescript/a...

The package url spec (the `pkg:` scheme used in SBOMs and CVEs) became a formal ECMA standard in December (ECMA-427). I maintain the .NET implementation and just put out a 2.0 release candidate with full spec conformance. Stable release coming soon. github.com/package-url/packageurl-dotnet

SOUND TRANSIT'S 2 LINE OPENS SOON: Judkins Park Station opens March 28! Are you ready to Flip Your Trip with a whole new way to get to and from the Eastside? https://sdotblog.seattle.gov/2026/03/16/2-line-connection/

Node.js is moving to one major release per year starting with Node 27! 🚀 ✅ Simpler: Every release becomes LTS. ✅ Predictable: Version numbers now align with the year. ✅ New: A 6-month Alpha channel for early testing. https://bit.ly/4rnosLg

The 7 minute Irish animation that is nominated for an Oscar. Worth a watch. #SpeirGorm

I know this country is addicted to cars but it genuinely is so much better when you’re not in a car. People were not made to isolate themselves in private mobile living rooms. When there’s not a literal wall separating you, it turns out a lot of people are friendly.

Routle - King County Metro 02/27/2026 🟥 🟥 🟥 🟥 🟥 www.routle.city/king_county_...

Hot take: package provenance (npm, pypi, etc.) should be a one-way street. You should have to bump a major version to publish without it.

Routle - King County Metro 02/26/2026 🟩 ⬛ ⬛ ⬛ ⬛ www.routle.city/king_county_...

Come, Sir Andrew, there’s no remedy

The eslint-config-prettier compromise last year had a tell: the malicious versions were published to npm without provenance attestation, while the legit ones all had it. So I added a check to Dependabot that warns when a package loses its provenance between updates.

Built a Home Assistant integration for Specialized Turbo e-bikes. Battery health, motor power, speed, cadence, odometer, etc. All over Bluetooth, all local. Works with 2017+ models with TCU. Install via HACS. #HomeAssistant #ebike #BLE #SmartHome github.com/JamieMagee/ha-specialized-turbo

🎆 Go 1.26.0 is released! 🗒️ Release notes: https://go.dev/doc/go1.26 ⬇️ Download: https://go.dev/dl/#go1.26.0 #golang

TypeScript 6.0 beta is now published! This release brings - inference improvements for functions - updates to package.json 'imports' - the Temporal APIs - alignments for the upcoming TypeScript 7.0 - & more! Try it today! devblogs.microsoft.com/typescript/a...

Dependabot now supports OIDC authentication https://github.blog/changelog/2026-02-03-dependabot-now-supports-oidc-authentication

The Dependabot Proxy is now open source with an MIT license https://github.blog/changelog/2026-02-03-the-dependabot-proxy-is-now-open-source-with-an-mit-license

🔐 PASSWORDS? WHERE WE'RE GOING WE DON'T NEED PASSWORDS 🔐 STRAP IN SECURITY FANS: Dependabot just learned how to authenticate WITHOUT storing secrets, and your security team is about to ugly-cry with joy! 😭🎉 OIDC SUPPORT HAS LANDED! github.blog/changelog/20...

🚨CODE RED (BUT LIKE A GOOD RED): WE JUST OPEN SOURCED THE DEPENDABOT PROXY🚨 Attention Dependabot fans and security nerds: The Dependabot Proxy just escaped from its private repo and is now LOOSE ON THE INTERNET under the MIT license! github.com/dependabot/p...

🚌 Today is the first time Seattle transit riders can pay the fare with a credit card or smartphone The new feature launches on Rapid Ride G, and will be rolled out across the bus system in the coming weeks 📲 I wish I was in Seattle this week to try it out! 🙋‍♂️ Give it a try & tell me about it here

There is no better advert for the 2 Line than seeing it fly past bumper to bumper traffic on the I-90 bridge.

💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 #GOHAWKS

Say hello to a truly connected region on March 28! The Crosslake Connection is opening two new stations and a world of new possibilities for the Eastside, Seattle and beyond. 🚊✨   Explore this highly anticipated new connection and get ready to ride! 🎉 www.soundtransit.org/crosslake

The GitHub Copilot SDK is here 🙌 You can take the same Copilot agentic core that powers GitHub Copilot CLI and embed it in any application, with just a few lines of code. github.com/github/copil...

npm's broken UI bugged me enough I wrote a userscript to fix them, and added some features too. Repo: github.com/bluwy/npm-us... Here's a before-and-after comparison:

Just watched the new Knives Out and I think it's really important you know that the scene in the Seminary's Gym is filmed in the same place Rick Astley filmed the music video for Never Gonna Give You Up. I saw the window tracery and immediately made my friends pause the film so I could tell them.

Spotify wrapped 🙂‍↔️ Git wrapped 🙂‍↕️ git-wrapped.com/profiles/Jam...

Just released RubyGems/Bundler 4.0.0: blog.rubygems.org/2025/12/03/4... I also published Upgrading Guide for 4.0.0: blog.rubygems.org/2025/12/03/u... RubyGems reached 4.0 a little earlier than Ruby, but I'm really looking forward to 12/25.

We've got some updates on TypeScript 7! The new native port - can type-check any project - supports --build and --incremental - has rich editor features implemented - is still 10x faster and is ready for you to try today! devblogs.microsoft.com/typescript/p...

Visual Studio is going evergreen: - Feature updates every month, not every quarter. - A new annual version each year, released in November alongside the .NET release. devblogs.microsoft.com/visualstudio...

NEW // How Mayor-elect Katie Wilson Can Hit the Ground Running, Walking, Rolling, and Biking 🏃‍♀️🚶‍♂️👩‍🦽🚴‍♀️🚌 Op-ed by @sngreenways.bsky.social via @theurbanist.org // 🔗 www.theurbanist.org/2025/11/23/h...

Car Size xkcd.com/3167/

Start your downloads