https://evanhahn.com/why-alias-is-my-last-resort-for-aliases...
209 karma · joined December 25, 2023
https://evanhahn.com/why-alias-is-my-last-resort-for-aliases...
> Dependencies | SBOM / manifest parsing across npm, PyPI, Maven, Go, Ruby; flags unpinned, shadow, or non-registry deps.
The project seems like it only requires Python >= 3.9!
Nit: clicking "Create X" to add a new tag seems worse than pressing enter to create one as you have to go off the tag menu and back onto it to create or add another, but it's not necessarily clear that you can press enter to create one.
If you want an entry timestamped to your current time, you can make a new entry.
Drivers like you ruin lives.
...
I wouldn't say you'd only learn specifics of the frameworks. Maybe if you only submitted 2 or 3 PRs, but that's not what parent is suggesting: 'start contributing heavily'.
You can imagine some variant of this attack including a carefully designed Emacs Lisp payload, which the unsuspecting and desperate-for-a-job victim might open in Emacs. Surprising that the Emacs maintainers didn't fix it as quickly as you'd hope.
Previous submission (paper link submitted): https://news.ycombinator.com/item?id=40646450
Our teachers were just as intrigued and excited as we are when they saw games running on the calculator for the first time, and from then on just told students off for getting sidetracked by Super Mario on a case by case basis.