//
sign in
Profile
by @danabra.mov
Profile
by @dansshadow.bsky.social
Profile
by @jimpick.com
AviHandle
by @danabra.mov
AviHandle
by @dansshadow.bsky.social
AviHandle
by @katherine.computer
EventsList
by @katherine.computer
ProfileHeader
by @dansshadow.bsky.social
ProfileHeader
by @danabra.mov
ProfileMedia
by @danabra.mov
ProfilePlays
by @danabra.mov
ProfilePosts
by @danabra.mov
ProfilePosts
by @dansshadow.bsky.social
ProfileReplies
by @danabra.mov
Record
by @atsui.org
Skircle
by @danabra.mov
StreamPlacePlaylist
by @katherine.computer
+ new component
Profile
Loading...
Package Management Nerd, working on mapping the world of open source software https://ecosyste.ms and blogging about package managers at https://nesbitt.io 🌉 bridged from ⁂ https://mastodon.social/@andrewnez, follow @ap.brid.gy to interact
Andrew Nesbitt









Loading...
Software, uh, finds a way
2h
Joint Guidance on Vulnerability Naming and Disclosure: https://nesbitt.io/2026/06/12/joint-guidance-on-vulnerability-naming-and-disclosure.html
Joint Guidance on Vulnerability Naming and Disclosure: https://nesbitt.io/2026/06/12/joint-guidance-on-vulnerability-naming-and-disclosure.html
Protip: You really don't want to invite me to talk about javascript packaging, no-one involved will have a good time.