Category
Practical notes, explanations, and lessons filed under software.
4 articles
GitHub now automatically pauses some potentially malicious Actions runs in public repositories. Here is how to tell that security hold from ordinary fork or bot approvals and what to inspect before clicking Approve.
A new study of 29,624 active GitHub repositories finds explicit AI contribution rules are still rare—and offers a practical framework for disclosure, human accountability, scoped restrictions and enforcement.
npm 12 now blocks unapproved dependency install scripts by default. Here is how to diagnose broken installs, approve only the scripts you trust, and handle the other new Git and remote-URL restrictions.
Meta’s new Muse Code beta uses pay-as-you-go token pricing, while Claude Code and Codex mix subscriptions, limits and credits. Here is a practical way to compare real coding-agent cost without being fooled by sticker prices.
