frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

France to ban unsolicited telemarketing calls

https://www.lemonde.fr/en/france/article/2026/08/06/france-to-ban-unsolicited-telemarketing-calls...
381•aziaziazi•4h ago•237 comments

H3-metal – Native MiniMax-H3 inference for Apple Silicon

https://github.com/antirez/h3.c
310•swyx•10h ago•67 comments

As AI eats the web, the internet’s collective memory is disappearing

https://thewalrus.ca/google-search-is-dying/
396•awnird•13h ago•469 comments

To Save C, We Must Save ABI (2022)

https://thephd.dev/to-save-c-we-must-save-abi-fixing-c-function-abi
79•gurjeet•3d ago•55 comments

Chicken Scheme 6.0

https://code.call-cc.org/releases/6.0.0/NEWS
213•eatonphil•11h ago•28 comments

Show HN: Needle2: 14MB agentic LLM for phones, wearables, smart home and robots

https://cactuscompute.com/needle
374•HenryNdubuaku•18h ago•136 comments

LFM2.5 2.6B model competitive with 4x larger models

https://huggingface.co/LiquidAI/LFM2.5-2.6B
94•nateb2022•6d ago•23 comments

Show HN: Scroll through all 43252003274489856000 Rubik's Cube states

https://everycube.alen.is/
216•Alen123•13h ago•75 comments

Mark Zuckerberg attacks 'closed' AI rivals as Meta returns to open models

https://www.ft.com/content/4e3957f8-ea7c-4c46-a3de-cdce8e526878
539•root-parent•22h ago•491 comments

Programming the Gigatron

https://www.iwriteiam.nl/PGigatron.html
14•shakna•4d ago•1 comments

The “mechanical miracle” that ruined Mark Twain’s life

https://resobscura.substack.com/p/the-mechanical-miracle-that-ruined
153•benbreen•5d ago•78 comments

Closing Canario Terminal source code

https://rapha.land/closing-canario-terminal-source-code/
17•atan2•4h ago•18 comments

Recycle – Floppydisks

https://www.floppydisk.com/recycle
73•calvinmorrison•10h ago•32 comments

Stowaway – Take the window seat on any plane or satellite overhead

https://stowaway.live/
295•thunderbong•3d ago•37 comments

Faster floating point math with Rust's new API

https://pythonspeed.com/articles/faster-float-math-rust/
52•subset•4d ago•9 comments

About Rx Kids

https://rxkids.org/about/
34•mooreds•4d ago•39 comments

Sonic Pi v5

https://www.patreon.com/samaaron/posts/sonic-pi-v5-166001392
388•samaaron•4d ago•91 comments

How Claude marks AI-generated content

https://support.claude.com/en/articles/16266773-how-claude-marks-ai-generated-content
215•mfiguiere•14h ago•178 comments

The UK's war on anonymity has come to America

https://www.effort.news/uk-lobby
538•slowin•12h ago•540 comments

Hollywood and Shanghai Cinema in the 1930s [pdf]

https://docs.lib.purdue.edu/cgi/viewcontent.cgi?article=2225&context=clcweb
3•Bluestein•5d ago•0 comments

Rust SIMD on the GPU

https://www.vectorware.com/blog/simd-on-gpu/
195•sagacity•18h ago•94 comments

Muse Glimmer: 30B-parameter model optimized for always-on local agent workflows

https://research.meta.ai/blog/introducing-muse-glimmer-open-agentic-model
1129•riordan•1d ago•611 comments

Show HN: Mcptoon – Token-efficient MCP CLI client

https://github.com/activeing123/mcptoon
56•mcptokensaver•6h ago•40 comments

Squeak 6.1

https://squeak.org/release_notes/6.1/
272•fniephaus•1d ago•133 comments

Tail-call optimization in C is relatively recent (2025)

https://lwn.net/Articles/1034703/
152•prakashqwerty•1d ago•136 comments

Learning more about Claude's mathematical capabilities

https://www.anthropic.com/research/riemann-zeta
222•tosh•18h ago•145 comments

What's the best programming language for coding agents?

http://danluu.com/pl-tokens/
203•chaychoong•19h ago•134 comments

Confessions of a Long-Distance Sailor

https://arachnoid.com/lutusp/sailbook.html
127•AntiRush•15h ago•38 comments

Publishing Schematics Before “Open Source” Was a Word

https://fabscene.medium.com/publishing-schematics-before-open-source-was-a-word-55-years-of-akizu...
97•extralongdivisi•3d ago•19 comments

Show HN: Ante, a coding agent in a single binary that runs offline

https://github.com/AntigmaLabs/ante
141•ubermon•20h ago•82 comments