March 24, 2025 at 2:05:57 PM UTC

A versioned archive of posts from Bluesky, Mastodon, GitHub, npm, YouTube, Letterboxd, Hacker News, and blogs. Browse the most popular posts.

Last built Nov 7, 2026, 1:18 PM UTC.

4,807 posts by year

Update: looks like a huge flaw somewhere in the vulnerability scanner code being used by these tools (it doesn’t support namespaced packages)

5 replies

Zach Leatherman 18 min later
Socket 3 hr later

We have already pushed a fix for this and are clearing out our backlog. Thanks for bringing it to our attention!
1. Zach Leatherman 4 hr later
  
  Appreciate y’all! 🙌
Zach Leatherman 4 hr later

The @socket.dev folks have quickly fixed this!

bsky.app/profile/sock...
Zach Leatherman May 13, 2025

Another follow-up: the socket.dev folks fixed this on their end almost immediately but this has now also been fixed upstream in `grype` too: github.com/anchore/gryp...