External security researchers at Accomplish identified a vulnerability in Cloudflare Containers that could expose residual disk data from previous workloads. We explain how the issue worked, how we investigated it, and the steps we took to remediate it.

Every executable nixpkgs ever shipped, on your PATH, fetched only when something reads it.

markdown-friendly react components for mdx. callouts, steps, terminals, charts, and timelines that sit between paragraphs — copied into your project with the shadcn cli, not installed from npm.

Several months ago, I decided that AI contributions were no longer welcome in a FOSS project I am building and maintaining - LibreWeddingPlanner. It’s not that it got a lot of contributions with AI — actually all contributions I’ve had are translations and…

Native macOS client for Herdr, built with Rust and GPUI. View terminal sessions, workspaces, Git worktrees, and agent activity through your local Herdr daemon. - penso/herdr-gpui

One command gives your dev server a public HTTPS URL. WebSockets and hot reload work through it. Free, no account.

A case study of how Cilium secures its CI/CD pipeline end to end: SHA-pinned actions, two-phase checkouts for pull_request_target, Re...

Pure JS, about 256 KB (85 KB packed), zero dependencies. Try any package in your browser.

We are releasing cf, our new command-line tool that mirrors the entire Cloudflare API and supports programmatic TypeScript configuration. We are also open-sourcing Forge, our internal SDK generator.