March 24, 2025 at 2:14:04 PM UTC

Nexodus Archive

A versioned archive of posts from Bluesky, Mastodon, GitHub, npm, YouTube, Letterboxd, Hacker News, and blogs. Browse the most popular posts.

Last built Nov 7, 2026, 1:18 PM UTC.

	Since	posts	replies	likes	reposts and quotes	views
Bluesky	May 2023	1,039	8,236	23,127	2,380
Mastodon	Nov 2022	2,399	29,156	55,396	16,820
GitHub	Jul 2010	179	5,777 3,520	33,866	3,317
npm	Jul 2014	139	1,546			75,991,720
YouTube	Dec 2015	30		1,203		32,713
Letterboxd	Mar 2026	55
Blog	Nov 2025	20
Hacker News	Jan 2011	59	575	802
All	Jul 2010	4,807	37,967	114,394	22,517	76,024,433

8 2010
4 2011
3 2012
6 2013
9 2014
55 2015
78 2016
110 2017
101 2018
66 2019
134 2020
201 2021
327 2022
998 2023
879 2024
1,035 2025
793 2026

4,807 posts by year

In reply to Mastodon post

Update: thanks to @chrisw_b for hunting this down: looks like a huge flaw in the vulnerability scanner being used by these tools (it ignores namespaces on package names!)

More info:

https://github.com/jridgewell/gen-mapping/issues/12
https://github.com/anchore/grype/issues/1701

6 replies

Zach Leatherman 9 min later
1. Zach Leatherman 1 hr later
  
  it’s hard not to be jaded when facial recognition is being used in criminal investigations while our industry is having trouble accurately testing whether two strings are equal
2. Doug Parker 🕸️ 16 hr later
  
  @zachleat
  ACTUALLY `name` was deprecated after two versions and now links to `@name/name` which contains the same code.
  They're completely different.
  1. Zach Leatherman 22 hr later
    
    @develwithoutacause @name oh no.
Zach Leatherman 4 hr later

The @SocketSecurity folks have quickly fixed this one:
https://bsky.app/profile/socket.dev/post/3ll5dewnrx22b
Zach Leatherman May 13, 2025

Another update: the socket.dev folks fixed this on their end almost immediately but this has now also been fixed upstream in `grype` too: https://github.com/anchore/grype/issues/1701
@chrisw_b