Section
Languages, tooling, and practices that shape how software gets made.
12 articles
Loading…
Malicious litellm 1.82.7 and 1.82.8 hit PyPI on March 24, 2026 after a Trivy compromise harvested a publish token. CloudSEK's 2,500-org narrative needs the SecurityWeek nuance that most exposure predated LiteLLM.
AMD's CPPC Performance Priority for some Zen 6 products lets software set per-core FloorPerf minimums so firmware throttles lower-priority cores first under power and thermal limits.
Amateur designer Pongsagon Vichit's TinyGPU v2.0, about 240k transistors on a Tiny Tapeout shuttle, reached real silicon tests with a simple open-source 3D pipeline under Apache-2.0.
Cambridge ASIC job posts keep stacking up while Eben Upton's May AMA put Pi 6 no earlier than early 2028. Memory prices, not mystery, are doing most of the delaying.
Bun 1.3.14 was the last release built on the original Zig codebase. Bun 1.4's canary is the first built substantially in Rust, the product of an 11-day, roughly 535,000-line agent-driven rewrite. Early numbers from creator Jarred Sumner claim 128 bugs fixed relative to 1.3.14 alongside real memory-usage improvements.
Zig 0.16.0 deprecates @cImport, moves C translation toward the build system and translate-c, and replaces the Clang-based translator with an Aro-based one as the project loosens its LLVM library hard dependency.
npm 12, announced on the GitHub Changelog on July 8, disables arbitrary install scripts, git dependencies, and remote tarballs by default, with new allow and deny commands for the cases that legitimately need them. JFrog has attributed roughly 53 percent of malicious npm packages to these exact mechanisms.
Deno 2.8 rewrote the npm compatibility layer's dependency resolution and download path. On a fixture combining React, Vite, Babel's parser, and ESLint, a cold install fell from 3,319ms to 906ms, a 3.66x speedup that holds at 3.53x to 3.75x across repeated CI runs.
Rust 1.97.0 made v0 mangling the stable default, gave Cargo a real build.warnings setting, and stopped silencing linker output on success. 1.97.1 fixed a miscompilation a week later.
