/dev/null
Sign in

Jordi Boggiano

@Seldaek

Working on https://packagist.com and @composer lead

commits
58
following
22
followers
256

Commit activity

58 commits in the last 30 days

longest streak 6 dayscurrent 2

1,523 / 2,500 XP977 XP to root

Today

Jordi Boggiano@Seldaek
@composer 2.11.2 just dropped with the latest batch of security fixes freshly baked from your local LLM https://github.com/composer/composer/releases/tag/2.11.2
GitHubRelease 2.11.2 · composer/composerSecurity: Fixed arbitrary command execution via the prevent_url_access_callable transport option being loaded from composer.lock / vendor/composer/installed.json (GHSA-jhfp-4ppm-crmm) Security: Fix...

Yesterday

Jordi Boggiano@Seldaek
Is there a word for these agent driven cascades of new issues / PRs / security reports that you get as an open source maintainer? It's not just the total volume of it but the fact that you sometimes get 5 of them within seconds as an agent unleashes their wrath on your repo can…
Show thread

Mon, Nov 2

Sun, Nov 1

Jordi Boggiano@Seldaek
From my experience running packagist this will not be enough for long 😅 random people will claim orgs and then disappear, etc. But it's a good starting point for sure. Easy enough to change later.
QuotingTTom@tom
Only a member of a GitHub organization can claim its /dev/null page. The first member to claim it becomes its admin, and after that the page can't be claimed again. Claiming asks for no extra GitHub permission: it just checks that GitHub lists you among the org's public members.…

Sat, Oct 31

Jordi Boggiano@Seldaek
It's saturday so obviously I'm applying patches/workarounds to Packagist servers for the latest CVE, and hardening other stuff while I'm at it. I really hope the pace of all this calms down eventually 🫩

Thu, Oct 29

Jordi Boggiano@Seldaek
@composer 2.11 is out 🚀 cooldown dependency policies hold back freshly published package versions for an hour or a day, so compromised releases can be flagged before they reach your composer update. Composer 2.11 includes several security fixes, block-scope support for custom…
Private PackagistComposer 2.11We are pleased to announce the release of Composer 2.11.0. The highlight of this release is the new cooldown dependency policy, which withholds newly published package versions for a configurable period of time before Composer will install them. Composer 2.11 also ships several security fixes, removes the

Wed, Oct 28

Sun, Oct 25

Sat, Oct 24

Fri, Oct 23

Jordi Boggiano@Seldaek
Can we get rolling window rate limiting for pasteis too?
QuotingTTom@tom
Not quite. The 10-commits-per-minute limit is a rolling throttle, not a daily reset. For day-based things like streaks, the knowledge base says days follow the activity graph's app-timezone grouping, not your selected display timezone. So the boundary is set by the app's…
J
JonJKF
No, I think pastéis should be baked in batches around ~05:00 so they are fresh for the morning.
Jordi Boggiano@Seldaek
Ok after this stressful week I figured a fun little project is in order. Posting this from https://dev/null 😎 If you also want to join the fun it is here https://github.com/Seldaek/dev-null-proxy
QuotingJBJordi Boggiano@Seldaek
And the other one works too.. Can you spot it? :D
Attached image
JB
Julien Bianchiquoted
At some point, we'll really have /dev/null everywhere 😁 On the filesystem with @Seldaek's https://github.com/Seldaek/dev-null-proxy, as a TUI with https://github.com/mihaidaniel34/dev-null-tui from @mihaidaniel34, the mobile app by @simonhamp, Claude Code with…
GitHubGitHub - Seldaek/dev-null-proxy: Local proxy so https://dev/null serves dev-null.sh and you can pipe to /dev/NULL to write commits tooLocal proxy so https://dev/null serves dev-null.sh and you can pipe to /dev/NULL to write commits too - Seldaek/dev-null-proxy

Thu, Oct 22

Jordi Boggiano@Seldaek
Done updating PHP? Composer 2.11 RC1 is available with a cooldown policy, terminal progress reporting via OSC 7501, and a whole lot of fixes including security checks against the compromised eMudhra certificates. Try it out now!…
GitHubRelease 2.11.0-RC1 · composer/composerComposer 2.11 is ready for a release, and we need your help to test it and report any regression. Please try it out! Running composer self-update --preview will get you the 2.11.0-RC1 Running comp...

That's @Seldaek's root commit.