Andrew Nesbitt

Open Source Projects & Foundations

Overview

Package management and open source metadata expert. Building Ecosyste.ms, open datasets and tools for critical open source infrastructure.

News

Blog 3 months ago
Supplier Security Questionnaire
Estimated time to complete: 20 minutes.
Read more
Report
Blog 3 months ago
Shared Code Between Package Managers
Which package-management libraries twenty package managers reuse from each other.
Read more
Report
Blog 3 months ago
This Week in Package Management: 8 August 2026
Releases, advisories, and articles from across the package management world
Read more
Report
Blog 3 months ago
The Software Stewardship Lab
A new applied research lab for open source sustainability, launching today
Read more
Report
Blog 3 months ago
A year of AI disclosure in critical packages
Assisted-By: Daniel Stenberg
Read more
Report
Blog 3 months ago
brew install actions/checkout
Using Homebrew's tap machinery as a curated distribution layer for GitHub Actions.
Read more
Report
Blog 3 months ago
This Week in Package Management: 1 August 2026
Releases, advisories, and articles from across the package management world
Read more
Report
Blog 4 months ago
The AI Phrasebook
We have autonomous agents at home.
Read more
Report
Blog 4 months ago
Wheels, Bottles and Images
Any sufficiently advanced package manager is indistinguishable from a container registry.
Read more
Report
Blog 4 months ago
Why npm Dependency Trees Are So Big
Two versions of lodash walk into a tree
Read more
Report
Show more news