Just caught up on this great talk at 
@fosdem #FOSDEM2026 from the people at 
@dangerzone about how to create reproducible containers images (with docker or podman) Definitely a few gotchas in there and stuff I wasn't aware with, but I have been wondering about this topic recently:
https://fosdem.org/2026/schedule/event/RYM8SF-repro-build/
Search results
Another great #FOSDEM talk from Michael Winser at 
@openssf / #AlphaOmega about the terrible economics of package registries like #NPM #maven #PyPi #RubyGems #crates
https://fosdem.org/2026/schedule/event/8WJKEH-package-registry-economics/
Some charts from different registries are at https://go.xwind.io/registry-research-report
The slide below is a take on some of the common "solutions" that people come up with for funding registries (also applicable to non-registry products with large numbers of downloads) and what might happen if you choose them
JAR로 되어있는 한글 형태소 분석기 라이브러리인 꼬꼬마 2.0과 Maven에 게시된 open-korean-text를 C#에서 프로젝트 구성없이 불러다 쓰는 예제입니다.
C# 코드 파일과 XML 설정 파일만 있으면 Maven과 JAR 패키지도 손쉽게 가져와서 C#으로 코딩할 수 있습니다. C# 파일 하나만 바라보면 될테니 코드 어시스턴트의 도움도 마음껏 받을 수 있으니 더욱 좋겠죠!
Last Friday, I explained to a friend that I'm really not a fan of JitPack - an argument I've had numerous times. So this weekend I finally wrote down why I consider JitPack harmful to the ecosystem and a security risk.
