Changelog Master Feed

Over the past two months, we’ve seen some of the most serious supply chain attacks in npm history: phishing campaigns, maintainer account takeovers, and malware published to packages with billions of weekly downloads. What is going on?! What can we do about it? Our old friend, Feross Aboukhadijeh, joins us to help make sense of it all.

Join the discussion

Changelog++ members save 2 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

• Depot – 10x faster builds? Yes please. Build faster. Waste less time. Accelerate Docker image builds, and GitHub Actions workflows. Easily integrate with your existing CI provider and dev workflows to save hours of build time.

Featuring:

• Feross Aboukhadijeh – Website, GitHub, X
• Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
• Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X

Show Notes:

Something missing or broken? PRs welcome!

Charlie Marsh built Ruff (an extremely fast Python linter written in Rust) and uv (an extremely fast Python package manager written in Rust) because he believes great tools can have an outsized impact. He believes it so much, in fact, that he started an entire company that builds next-gen Python tooling.

On this episode, Charlie joins us to tell us all about it: why Python, why Rust, how they make everything so fast, how they’re starting to make money, what other products he’s dreaming up, and more.

Join the discussion

Changelog++ members save 2 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

• Depot – 10x faster builds? Yes please. Build faster. Waste less time. Accelerate Docker image builds, and GitHub Actions workflows. Easily integrate with your existing CI provider and dev workflows to save hours of build time.

Featuring:

• Charlie Marsh – GitHub, LinkedIn, Mastodon, X
• Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
• Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Show Notes:

Something missing or broken? PRs welcome!

Andrew Churchill thinks companies should really be hiring junior engineers, Addy Osmani announces Chrome DevTools MCP, GitHub lays out a roadmap to fend off npm attacks, Jerry Liu builds an app that generates a timeline of your day’s activities, and Sean Goedecke attempts to define “good taste” in the context of software engineering.

View the newsletter

Join the discussion

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

• Changelog News – If you’d like to put your startup, passion project, big idea, event, whatever in front of Changelog’s classy, tasteful audience of hackers… Fill out this form!

Featuring:

• Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Bryan Cantrill and Steve Tuck, the co-founders of Oxide, are on the pod live (to tape) from the stage at OxCon. Jerod and I were invited to Oxide’s annual internal conference to meet the people and to hear the stories of what makes Oxide a truly special place to work right now. The best part was this on-stage discussion with Bryan and Steve. Enjoy!

Join the discussion

Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!

Sponsors:

• CodeRabbit – AI-native code reviews, built for the modern dev stack. — CodeRabbit is your always-on code reviewer—flagging hallucinations, surfacing smells, and enforcing standards, all without leaving your IDE or GitHub PRs. Trusted by top teams to ship better code, faster.
  

Featuring:

• Bryan Cantrill – Website, GitHub, LinkedIn, Bluesky, Mastodon, X
• Steve Tuck – LinkedIn, X
• Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
• Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X

Show Notes:

Something missing or broken? PRs welcome!

Voices of Oxide on the pod! Cliff Biffle (engineer), Dave Pacheco (engineer), and Ben Leonard (designer) are on the show today. Jerod and I were invited to Oxide’s annual internal conference called OxCon to meet the people and to hear the stories of what makes Oxide a truly special place to work right now.

Cliff Biffle is working on all Hubris and firmware. Cliff says “There’s a lot that happens before the ‘main CPU’ can even power on.” Dave Pacheco is leading the efforts on Oxide’s “Update” system. And Ben Leonard in charge of all things brand and design at Oxide.

Join the discussion

Changelog++ members save 3 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

• CodeRabbit – AI-native code reviews, built for the modern dev stack. — CodeRabbit is your always-on code reviewer—flagging hallucinations, surfacing smells, and enforcing standards, all without leaving your IDE or GitHub PRs. Trusted by top teams to ship better code, faster.
  

Featuring:

• Cliff Biffle – Website, GitHub, LinkedIn
• Dave Pacheco – Website, GitHub, LinkedIn
• Ben Leonard – LinkedIn, X
• Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
• Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Show Notes:

Something missing or broken? PRs welcome!

Adolfo Ochagavía believes we’re approaching the problem of configuration from a flawed starting point, Annie Mueller hits us with a wakeup call about how she reads beginner tutorials, Brian Kihoon Lee spends some time meditating on taste, Namanyay thinks vibe coding is coders braindead, and Can Elma speculates on why AI helps senior engineers more than juniors.

View the newsletter

Join the discussion

Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!

Sponsors:

• CodeRabbit – AI-native code reviews, built for the modern dev stack. — CodeRabbit is your always-on code reviewer—flagging hallucinations, surfacing smells, and enforcing standards, all without leaving your IDE or GitHub PRs. Trusted by top teams to ship better code, faster.
  

Featuring:

• Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Carl George joins the show to talk about Texas Linux Fest, Omarchy, Linux desktop environments, configuring Linux, and more. Use the code CHL15 for 15% off your ticket to Texas Linux Fest.

Join the discussion

Changelog++ members get a bonus 10 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• CodeRabbit – AI-native code reviews, built for the modern dev stack. — CodeRabbit is your always-on code reviewer—flagging hallucinations, surfacing smells, and enforcing standards, all without leaving your IDE or GitHub PRs. Trusted by top teams to ship better code, faster.
  

Featuring:

• Carl George – GitHub, LinkedIn, X
• Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
• Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X

Show Notes:

Use the code CHLG15 for 15% off your ticket to Texas Linux Fest.

Something missing or broken? PRs welcome!

Everything is changing. Adam is joined by his good friend Beyang Liu from Sourcegraph — this time, talking about Amp (ampcode.com). Amp is one of the many, and one of Adam’s favorite agentic coding tools to use. What makes it different is how they’ve engineered to it to maximize what’s possible with today’s frontier models. Autonomous reasoning, access to the oracle, comprehensive code editing, and complex task execution. That’s nearly verbatim from their homepage, but it’s also exactly what Adam has experienced. They talk through all things agents, how Adam might have been holding Amp wrong, and they even talked through Adam’s idea called “Agent Flow”. If you’re babysitting agents, this episode is for you.

Join the discussion

Changelog++ members get a bonus 16 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• CodeRabbit – AI-native code reviews, built for the modern dev stack. — CodeRabbit is your always-on code reviewer—flagging hallucinations, surfacing smells, and enforcing standards, all without leaving your IDE or GitHub PRs. Trusted by top teams to ship better code, faster.
  

Featuring:

• Beyang Liu – GitHub, X
• Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X

Show Notes:

Something missing or broken? PRs welcome!

Zach Gates quantifies the value of automating things, Albania’s new prime minister names an AI “minister” to his Cabinet, Eckart Walther launches Really Simple Licensing (RSL) along with some big names on the web, Vishnu Haridas praises UTF-8’s design, and Justin Searls disagrees with last week’s headline story about AI coding tools and shovelware.

View the newsletter

Join the discussion

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

• Depot – 10x faster builds? Yes please. Build faster. Waste less time. Accelerate Docker image builds, and GitHub Actions workflows. Easily integrate with your existing CI provider and dev workflows to save hours of build time.

Featuring:

• Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Mike Judge breaks down why he doesn’t believe the AI coding claims add up, the folks behind Cactoide create an open source alternative to Meetup / Eventbrite, Ryan Farley tells the story of how RSS beat Microsoft, Dominik Szymański ditched Docker for Podman (and thinks you should too), and Stripe announces a new layer 1 blockchain called Tempo.

View the newsletter

Join the discussion

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

• Augment Code – Developer AI that uses deep understanding of your large codebase and how you build software to deliver personalized code suggestions and insights. Augment provides relevant, contextualized code right in your IDE or Slack. It transforms scattered knowledge into code or answers, eliminating time spent searching docs or interrupting teammates.

Featuring:

• Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X