rarkins

6 ms·

1.
by rarkins 9mo ago
1. Set a default label for issues (e.g. “autoclose”) 2. Make your auto closing and locking logic based on that label (eg the label-actions github action) 3. As a maintainer, remember to remove the label when creating an issue!
2.
by rarkins 10mo ago
This seems to me to be the most likely explanation. Someone important and/or rich wants something memory-holed and the archive sites are amongst the last to contain the content, so someone else is creating a facade organization as an a
3.
by rarkins 1y ago
I posted something similar to X yesterday: https://x.com/rarkins/status/1966785560556511489 What was even worse than there being dupe ChatGPT apps in the Mac app store was that Perplexity and Gemini both recommend
4.
by rarkins 2y ago
Hi, Renovate author/maintainer here. The affected repo has now been taken down, so I am writing this partly from memory, but I believe the scenario is: 1. An attacker had write access to the tj-actions/changed-files repo 2. The at
5.
by rarkins 2y ago
Instapaper user here, with same questions
6.
by rarkins 2y ago
Renovate's TS tooling seems to work fine otherwise, and for ts-remove-unused as a new tool wanting to get adoption then you should be aiming to work the way your users already work, and not fail + tell them that they are the ones which
7.
by rarkins 2y ago
I tried it on https://github.com/renovatebot/renovate It deleted 100s of files, most of which were Jest test files, and potentially all of which were a mistake. I restored them all with `git restore $(git ls-files -d)`
8.
by rarkins 3y ago
I'm surprised to find there's not more demand for "back to back" travel wifi routers, e.g. so you can connect once to a hotel wifi and immediately all devices are connected via the router's own wifi. This is useful
9.
by rarkins 3y ago
I don't understand this graph. Weren't there 85+ startups in the class of 2019, example? https://techcrunch.com/2019/03/18/here-are-the-85-startups-t... But the graph shows 0/2
10.
by rarkins 3y ago
From https://www.marketscreener.com/quote/stock/PALTALK-INC-11131... > On June 30, 2022, we entered into a License Agreement with Visicom (the "License Agreement"), pursuant to which we agreed to dist
11.
by rarkins 3y ago
This seems relevant: https://contracts.justia.com/companies/peerstream-inc-2967/c...
12.
by rarkins 3y ago
Visicom really pumped the ManyCam lifetime upsells. I found 15 emails over an 18 month period in 2020-2021 with them pitching lifetime (which I eventually bought). An example email text they used is: > Upgrade now to ManyCam Studio Lifet
13.
Yandex Data Leak Triggers Malicious Package Publication(mend.io)
1 points by rarkins 4y ago|0 comments
14.
Malicious Code Deletes Directories If You Do Not Have a License(mend.io)
3 points by rarkins 4y ago|0 comments
15.
NPM typosquatting attack targeted popular packages with 1.5B weekly downloads(mend.io)
4 points by rarkins 4y ago|0 comments
16.
by rarkins 4y ago
What do you mean by "the included dependency checks"? If you're referring to Renovate, there's no such paid option. If you're referring to GitLab paid features, I'm not sure how that's any different betwee
17.
by rarkins 4y ago
Disclosure: Renovate author Renovate is indeed AGPL, but if you're just running it as a CLI, do you think there's anything to "watch out for"? It does not make any project you run it against AGPL, that's for sure. A
18.
by rarkins 4y ago
Additional background/details: https://twitter.com/rarkins/status/1574859892359368708 (thread)
19.
DYdX – exchange with –$1B daily trades – has had its NPM account hacked(github.com)
9 points by rarkins 4y ago|1 comments
20.
Single Author Uploaded 168 Packages to NPM in Dependency Confusion Attack(mend.io)
1 points by rarkins 4y ago|0 comments
21.
by rarkins 5y ago
This is interesting. It would be fun if one day contract negotiations were two people in their respective browsers moving HTML sliders back and forth across the “permissive” scale for each term (days termination notice, SLAs, etc).
22.
by rarkins 5y ago
Yarn’s offline support is not directly tied to PNP. Yarn v1’s support for “offline” installs was a day one requirement, and as I understand it one of the primary drivers for Facebook engineers (at the time) to drive the creation of Yarn. If
23.
by rarkins 5y ago
I agree. youtube-dl was another example of them turning a vulnerable moment into a win: https://twitter.com/natfriedman/status/1328365679473426432
24.
by rarkins 5y ago
Yes, rename out of pragmatism: there's no point retaining the friction/confusion which would persist forever