HN user

andrewnez

1,215 karma

Full stack web developer, Somerset UK

[ my public key: https://keybase.io/andrewnez; my proof: https://keybase.io/andrewnez/sigs/-82dhhz1jfIB7W3vm6wDfD1Njv8JL16KRW1avX3DItE ]

Posts48
Comments69
View on HN
www.youtube.com 1mo ago

The state of curl 2026 with Daniel Stenberg [video]

andrewnez
5pts0
socket.dev 1y ago

The Rise of Slopsquatting

andrewnez
11pts4
medium.com 7y ago

Untangle Your GitHub Notifications with Octobox

andrewnez
3pts0
blog.tidelift.com 8y ago

Bit Rot: the silent killer

andrewnez
5pts0
medium.com 8y ago

What does a sustainable open source project look like?

andrewnez
9pts0
manifest.fm 8y ago

The Manifest – A podcast all about package management

andrewnez
13pts1
medium.com 9y ago

Exploring Unseen Open Source Infrastructure

andrewnez
40pts4
github.com 9y ago

GitHub-inbox: Take back control of your GitHub Notifications

andrewnez
2pts0
medium.com 9y ago

Libraries.io November Progress Update

andrewnez
1pts0
medium.com 9y ago

Libraries.io Joins Brave New Software

andrewnez
4pts1
dependencyci.com 10y ago

Show HN: Dependency CI – Continuous testing for your dependencies

andrewnez
198pts62
medium.com 10y ago

Libraries.io goes Open Source

andrewnez
6pts0
medium.com 10y ago

Which Open Source libraries does Mozilla depend on the most?

andrewnez
17pts0
sendgrid.com 11y ago

You’re Pricing Out the Evangelist

andrewnez
3pts0
libraries.io 11y ago

Improve the bus factor of open source libraries

andrewnez
2pts0
blog.rubygems.org 11y ago

Request Hijacking Vulnerability in RubyGems 2.4.6 and Earlier

andrewnez
1pts0
medium.com 11y ago

Solving Open Source Discovery

andrewnez
32pts10
24pullrequests.com 11y ago

24 Pull Requests

andrewnez
89pts11
nodebots.io 11y ago

NodeBots – Robots powered by JavaScript

andrewnez
8pts1
blog.atom.io 12y ago

Atom: Hello Windows

andrewnez
74pts33
github.com 12y ago

GitHub Enterprise 11.10.340 Release

andrewnez
8pts0
octicons.github.com 12y ago

GitHub Octicons

andrewnez
89pts6
github.com 12y ago

GitHub London Meetup, 19th June

andrewnez
2pts0
github.com 12y ago

BuildCat – a Physical build avatar

andrewnez
2pts1
firstpr.me 12y ago

What was the first pull request you sent on GitHub?

andrewnez
1pts0
github.com 12y ago

GitHub Showcase: Clean Code Linters

andrewnez
4pts0
blog.npmjs.org 12y ago

Npm Raises $2.6M Seed Round

andrewnez
133pts77
github.com 12y ago

Proxying User Images

andrewnez
10pts1
24pullrequests.com 12y ago

24 Pull Requests - Giving gifts of code back for Christmas

andrewnez
94pts15
andrew.ghost.io 12y ago

Hacking Lego Mindstorms EV3 with JavaScript

andrewnez
31pts6

We’re slowly rolling out extra features that are enabled by installing the GitHub App (syncing state, CI status, author, assignee, labels) without needing repo scope, that’ll be free for open source repos and paid for private.

Didn’t expect to see this on HN news today, the homepage will be updated within the next day or two to explain the paid feature.

Octobox maintainer here, we’ve done a lot of work recently to make Octobox work better and fast for power users. I’ve heard that Shopify is using it to handle very high volumes of notifications and seem to be happy users.

We just launched this new podcast where we explore the technical details of package management, the stories and the history of various projects, and the communities around them too. Every two weeks there will be a brand new interview with a package manager maintainer.

First episode is an interview with Mike McQuaid, the lead maintainer of Homebrew.

I’ve been working on Dependency CI along with https://libraries.io, the service that powers it, in my spare time for the past few months, it’s great to finally get it out into the real world.

Dependency CI works like Travis CI but for the dependencies of your application, checking them for license and status issues every time you push to GitHub.

I've written a up a post on medium with more details: https://medium.com/@teabass/introducing-dependency-ci-e859fa...

It’s 100% free for open source projects and there’s a 14 day free trial for checking private github repositories too.

Projects are found via the apis provided by all the package managers that are tracked, Libraries watches rss feeds of new and updated packages on places like rubygems and npm and adds them from there.

They are at the moment, Go doesn't have a central repository like npmjs.org, each project is just a url that you can "go get", I'm trying to find a good way to group them that keeps the full dependency graph intact.

At the moment we lean completely on linguist for language detection, which isn't perfect but gets us a good amount of the way there.

Once we've got OPAM support more OCaml libraries will start to show up.