Insights
Practical writing on software architecture, SaaS products, AI automation, legacy modernisation, and the business of building reliable systems.
Curated links from external sources — not 360Softy original articles.
A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to distribute malicious code through Composer packages. [...]
Refactors ♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #15589 by @tiangolo.
Comments
Comments
SpaceX has more to prove before flying Starship all the way to low-Earth orbit.
Refactors ♻️ Validate Server Sent Event fields to avoid applications from sending broken data. PR #15588 by @tiangolo. Docs 📝 Document --entrypoint CLI option. PR #15464 by @YuriiMotov. 📝 Update and simplify docs about help and management. PR #15583 by @tiangolo. 📝 Add docs references to central contributing docs. PR #15580 by @tiangolo. 📝 Update security policy. PR #15577 by @tiangolo. 🍱 Update sponsors: TalorData image. PR #15562 by @tiangolo. 📝 Update docs, simplify usage of admonitions
GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitly approve a release prior to the packages becoming publicly available for installation. Called staged publishing, the feature is now generally available on npm. It mandates that a human maintainer pass a two-factor authentication (2FA) challenge to approve
Comments
Work with 360Softy
Book a free consultation and we will tell you honestly whether we can help.
