Tag: Crates.io

  • Simon Willison’s Weblog: Introducing OSS Rebuild: Open Source, Rebuilt to Last

    Source URL: https://simonwillison.net/2025/Jul/23/oss-rebuild/ Source: Simon Willison’s Weblog Title: Introducing OSS Rebuild: Open Source, Rebuilt to Last Feedly Summary: Introducing OSS Rebuild: Open Source, Rebuilt to Last Major news on the Reproducible Builds front: the Google Security team have announced OSS Rebuild, their project to provide build attestations for open source packages released through the NPM,…

  • Slashdot: Google Launches OSS Rebuild

    Source URL: https://tech.slashdot.org/story/25/07/22/144239/google-launches-oss-rebuild?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google Launches OSS Rebuild Feedly Summary: AI Summary and Description: Yes Summary: Google has launched OSS Rebuild, a project aimed at detecting supply chain attacks in open source software by independently verifying package builds from major repositories. The initiative addresses significant security threats in the open-source ecosystem and highlights…

  • Hacker News: Prompting Large Language Models in Bash Scripts

    Source URL: https://elijahpotter.dev/articles/prompting_large_language_models_in_bash_scripts Source: Hacker News Title: Prompting Large Language Models in Bash Scripts Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the use of large language models (LLMs) in bash scripts, specifically highlighting a tool called “ofc” that facilitates this integration. It explores innovative uses for LLMs in generating datasets…

  • Hacker News: New Rust RFC Proposes Adding Support for Trusted Publishing to Crates.io

    Source URL: https://socket.dev/blog/new-rust-rfc-proposes-adding-support-for-trusted-publishing-to-crates-io Source: Hacker News Title: New Rust RFC Proposes Adding Support for Trusted Publishing to Crates.io Feedly Summary: Comments AI Summary and Description: Yes Summary: The proposed RFC for “Trusted Publishing” on Crates.io aims to enhance the security of package publishing by transitioning from long-lived API tokens to a system using short-lived identity…