Nesbitt.io

Personal blog built with Jekyll and hosted on GitHub Pages.

I write about package management, software supply chain security, and open source infrastructure. I'm building Ecosyste.ms, a collection of open datasets and tools for understanding and improving critical open source infrastructure.

Recent posts

• If It Quacks Like a Package Manager
• Announcing New Working Groups
• .gitlocal
• Package Manager Magic Files
• Package Managers Need to Cool Down
• Package Management is Naming All the Way Down
• Transitive Trust
• Downstream Testing
• npm Data Subject Access Request
• xkcd 2347