Batteries no longer included, available separately on aisle four
Branch protection is a row in someone else's database
uBlock Origin for composer install
Thank you Dr. Zizmor
TUF, in-toto, and Sigstore only look pointless while nothing is on fire
How your dependencies became Bernies
apt install -t unstable, but make it your whole personality
Which of your dependencies are wearing sunglasses
Anne Robinson would like a word with .github/workflows
Every tool that makes automated decisions about dependencies invented its own policy format. There are standards for describing software components but none for writing rules about them.
Notes on ENISA's Technical Advisory for Secure Use of Package Managers.
How to add git-pkgs to your GitHub Actions workflows.
Summary of package management talks from FOSDEM 2026, covering supply chain security, attestations, SBOMs, dependency resolution, and distribution packaging across multiple devrooms.