Package Managers Need to Cool Down
Today's LiteLLM supply chain attack inspired me to revisit the idea of dependency cooldowns, the practice of only installing updated dependencies once they've been out in the wild for a ā¦
Simon Willisonās Weblog Ā· simonwillison.net [1]
2026, finding the balance between fixed bugs and zero days. There is very unlikely ever a reason you need to be running bleeding edge packages in prod most package managers now support cool downs.
Note
This post is a thought [2]. Itās a short note that I make
about someone elseās content online #thoughts
References:
[1]: https://simonwillison.net/2026/Mar/24/package-managers-need-to-cool-down/
[2]: /thoughts/
Today I Learned
Short TIL posts
1852 posts
latest post 2026-05-13
Publishing rhythm
External Link
X (formerly Twitter) Ā· x.com [1]
Everyone look away, nothing to see here.
[2]
Note
This post is a thought [3]. Itās a short note that I make
about someone elseās content online #thoughts
References:
[1]: https://x.com/ThePrimeagen/status/2038978962089492631
[2]: https://dropper.waylonwalker.com/file/090f03b2-e6f5-4ede-a814-bfbb4e237b54.webp
[3]: /thoughts/
External Link
X (formerly Twitter) Ā· x.com [1]
Anthropic safewords are the talk of the town today.
[2]
Note
This post is a thought [3]. Itās a short note that I make
about someone elseās content online #thoughts
References:
[1]: https://x.com/metedata/status/2038924041453441422
[2]: https://dropper.waylonwalker.com/file/c097c6dc-4b10-4fab-a9f9-1d4181422285.webp
[3]: /thoughts/
External Link
X (formerly Twitter) Ā· x.com [1]
webdev twitter is blowing up with implementations of pretext text calculations. The examples are absolutely fun and ridiculous.
[2]
Note
This post is a thought [3]. Itās a short note that I make
about someone elseās content online #thoughts
References:
[1]: https://x.com/_chenglou/status/2037713766205608234
[2]: https://dropper.waylonwalker.com/file/350a368f-0e6b-4375-98d6-6303961c0d6c.webp
[3]: /thoughts/
External Link
X (formerly Twitter) Ā· x.com [1]
The claude code source code leaked today and the tweets are great, maybe twitter is back.
Did you know you can replace the spinning verbs in Claude Code. Iām having fun with it.
[2]
Note
This post is a thought [3]. Itās a short note that I make
about someone elseās content online #thoughts
References:
[1]: https://x.com/joshmedeski/status/2039010741039120417
[2]: https://dropper.waylonwalker.com/file/8cf5cf65-40e1-4f40-8d09-b596a97dd51d.webp
[3]: /thoughts/
Nick Nisi (@nicknisi.com)
Y'all, I think I'm a convert to pi
Bluesky Social Ā· bsky.app [1]
Iām about to be pi pilled.
Note
This post is a thought [2]. Itās a short note that I make
about someone elseās content online #thoughts
References:
[1]: https://bsky.app/profile/nicknisi.com/post/3mhgcbpm4ds2p
[2]: /thoughts/
To Live In A World Without AI | Nic Payne
I'm finding lately that I wish we could go back to pre-ChatGPT... A world
without a code-gen easy button, where "easy" was LSP autocomplete, wher
pype.dev [1]
We f&#ing said @pype.dev, well f&#ing said. I think a lot of us are feeling this, weāve pitched our brain into a bucket and we are no longer stretching it in the same way. We still work in similar ways of old, with new ways of turning off and saying yes a bunch of times. the best thing I can hope for is that as things get better we have fewer yes loops, and more architectural design debates and deep thoughts. But I fear deep thoughts are gone to the way of āresearch the leading 10 frameworks and pick the best one for this project.ā and letting the clankers do the deep thinking. Its signing us up for a weird distopia.
I think a lot of us wish we could undo what has happened and go back to actually understanding what we are doing, but the world has changed, and if you are building average shit, like the average person, using models trained on average people doing average shit you cant keep up anymore.
Note
This post is a thought [2]. Itās a short note that I make
about someone ...
My Thoughts on Beads | Nic Payne
[Steve Yegge](https://en.wikipedia.org/wiki/Steve_Yegge) is a pretty well-known individual in the tech field, having been
around for a long time at some of the
pype.dev [1]
Iām in step with @pype.dev here, I really want beads to work for me, but my systems for infra/platform work are all over the place, not one repo. Iām considering trying the BEADS_DIR env var but idk if it fits my workflow. For now, similar to @pype.dev, I am rocking my own home vibed solution that Iāve intentionally put little effort in and its working great and I expect it to be broken and not working with the latest harnesses and models within a few months anyways, cause there is no predicting this train.
Note
This post is a thought [2]. Itās a short note that I make
about someone elseās content online #thoughts
References:
[1]: https://pype.dev/my-thoughts-on-beads/
[2]: /thoughts/
paynepride dot com outage on vacation | Nic Payne
The day after I leave for vacation I start getting SSL errors on every homelab
service I host for myself and others. The culprit was my Cloudflare API token
exp
pype.dev [1]
oof, outage on the homelab [2] during vacation, brutal. I can think of a couple of similar solutions to what @pype.dev has done to tailscale in, but Iām not sure that I could do this remotely. On one hand Iām so glad that cloudflared just takes care of certs on the other hand this really brings a gap in my understanding of what the heck I would do if it were broken.
An untested DR plan is not a DR plan.
An untested backup does not exist.
Note
This post is a thought [3]. Itās a short note that I make
about someone elseās content online #thoughts
References:
[1]: https://pype.dev/paynepride-dot-com-outage-on-vacation/
[2]: /homelab/
[3]: /thoughts/
-
Vibe coding [1] is going so far into the news sphere now that Adam Savage even weighs in with perspectives from someone who has built a life around building things with his hands, keeping up with new making techniques, discovering old techniques as they combine with new. He talks about 3d printing reviving his love of the pantograph as one automation technique eases the most difficult part of another.
Note
This post is a thought [2]. Itās a short note that I make
about someone elseās content online #thoughts
References:
[1]: /vibe-coding/
[2]: /thoughts/
Kubernetes is beautiful.
Kubernetes is beautiful.
Reddit Ā· reddit.com [1]
This is a fantastic progression through kuberentes concepts. From running a pod, to making it resiliant, holding secrets, accepting traffic, and autoscaling.
Note
This post is a thought [2]. Itās a short note that I make
about someone elseās content online #thoughts
References:
[1]: https://www.reddit.com/r/kubernetes/comments/1rzyhip/kubernetes_is_beautiful/
[2]: /thoughts/
Iāve been having issue with my keyboard disconnecting to my main desktop for
awhile. Today I got a cheap bluetooh dongle in and am giving it a run this
week to see how things go. The first step was to move it to the new adapter.
Iāve never had multiple adapters installed so this was a new to me process.
I was able to do it all with the same keyboard, It did require some juggling
between usb and bluetooth modes pluging and unplugging, two keyboards would be
simpler to reason about.
I canāt be bothered to change my brain to think about this machine on a
different zmk profile it is of absolute importance for it to remain on the same
profile, otherwise this would be a simple bind to another empty profile.
Why not use a cable on desktop?
I dont mind cable, and have used one on this setup for years, but I have
actually been picking up and moving this keyboard and using it with
different devices.
Iāve got a big battery and performace cranked up, unless my machine is
under load I do not notice any key lag.
I did it with bluetoothctl, Iām sure it could have been done with a gui like
blueberry or blueman.
bluetoothctl
# list adapters
list
select <old-adapter>
devices
# fin the MAC ...
More Details Than You Probably Wanted to Know About Recent Updates to My Notes Site
Writing about the big beautiful mess that is making things for the world wide web.
blog.jim-nielsen.com [1]
I love the level of thought that Jim has put into these changes and making sure that urls donāt change. Iāve got a big change in flight to my main site and this is one of the reasons that Iāve been sitting on it so long. I want to make sure urls arent broken, redirects work as they should, and there are no 404ās from existing urls. Currently the new version only exists on a separate deployement https://go.waylonwalker.com/
I also added the ability to āshuffleā between posts. This is mostly for myself. I like to randomly jump through notes Iāve published in the past for reoccurring inspiration
Love this idea and have it on my new site already as well, and have really enjoyed using it by pressing it a dozen or so times over the course of a few sessions. It highlights that I have too many posts like stars and thoughts and I should do some weighting to main posts. mine is at https://go.waylonwalker.com/random/
Note
This post is a thought [2]. Itās a short note that I make
about someone e...
Notes ā 06:34 Mon 23 Mar 2026
Notes ā 06:34 Mon 23 Mar 2026
dbushell.com Ā· dbushell.com [1]
Does anyone think fast-code will continue to pay the same salary? The answer isnāt to switch your brain off during your McCode shift and write a poem after work. Your job will be replaced by a Banglasdeshi slop-shop if AI improves (which is inevitable, apparently). Possibly the same sweatshop that loomed my Ā£3 T-shirt. The Luddites didnāt accept their fate so easily.
David has some good points here, but Iām feeling the opposite direction a bit. Execs have always liked keeping the PMās and the people steering the ship close by and were willing to farm out more and more grunt work. It feels like we are in a weird phase where there used to be a big group of people paid to write code. A few of them are exceptionally good at it and will remain. There will be a need for these people everywhere. Somehow we still need people hand editing assembly code optimizations, fortran, and cobol today. Those industries largely moved on, but a few great ones remain. I think this fast-code slop factory is going to be a short forgotten time in history, but no one yet knows whatās next. We are all waiting t...
Looking for inspiration? tooscut [1] by mohebifar [2].
Professional video editing, right in your browser. Made with Rust, WebGPU, WASM, and Tanstack Start.
References:
[1]: https://github.com/mohebifar/tooscut
[2]: https://github.com/mohebifar
I like kraanzuās [1] project smassh [2].
Smassh your Keyboard, TUI Edition
References:
[1]: https://github.com/kraanzu
[2]: https://github.com/kraanzu/smassh
Iām really excited about KittenTTS [1], an amazing project by KittenML [2]. Itās worth exploring!
State-of-the-art TTS model under 25MB š»
References:
[1]: https://github.com/KittenML/KittenTTS
[2]: https://github.com/KittenML
Today I learned that docker creates an empty /.dockerenv file to indicate that
you are running in a docker container. Other runtimes like podman commonly use
/run/.containerenv. kubernetes uses neither of these, the most common way to
detect if you are running in kubernetes is to check for the presence of the
KUBERNETES_SERVICE_HOST environment variable. There will also be a directory
at /var/run/secrets/kubernetes.io/serviceaccount that contains the service
account credentials if you are running in kubernetes.
If youāre into interesting projects, donāt miss out on qmd [1], created by tobi [2].
mini cli search engine for your docs, knowledge bases, meeting notes, whatever. Tracking current sota approaches while being all local
References:
[1]: https://github.com/tobi/qmd
[2]: https://github.com/tobi
Looking for inspiration? OrcaSlicer-FullSpectrum [1] by ratdoux [2].
G-code generator for Snapmaker U1 with Full Spectrum layer blending
References:
[1]: https://github.com/ratdoux/OrcaSlicer-FullSpectrum
[2]: https://github.com/ratdoux