frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

How Bluesky draws its logo on screenshots

https://timmarinin.net/2026/bluesky-screenshots/
467•gavide•10h ago•322 comments

GPT-5.6 Sol Pricing Cut by 50%

https://openrouter.ai/openai/gpt-5.6-sol
410•Topfi•11h ago•241 comments

Quake Shareware, a CD-ROM just a little too full

https://fabiensanglard.net/quake_shareware_cd/index.html
320•shdon•10h ago•134 comments

Fairphone 6 and PostmarketOS working main camera

https://catcrafts.net/posts/fairphone-6-postmarketos-working-main-camera
175•pizzaiolo•10h ago•41 comments

A Preview of DuckDB v2.0

https://duckdb.org/2026/08/17/duckdb-20-highlights
623•ibotty•18h ago•112 comments

The Benchmarkpocalypse

https://danluu.com/benchpocalypse/
83•cyndunlop•6h ago•19 comments

Shattered skeleton is first confirmed death from trebuchet

https://www.science.org/content/article/shattered-skeleton-scottish-castle-first-confirmed-death-...
63•hermitcrab•4d ago•42 comments

Ranking the Most Brilliantly Colored Birds with Data

https://moultano.wordpress.com/2026/08/14/fairly-ranking-the-most-brilliant-birds/
10•moultano•2d ago•2 comments

AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira

https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug
367•galnagli•18h ago•141 comments

Olo (Color)

https://en.wikipedia.org/wiki/Olo_(color)
417•inigyou•5d ago•80 comments

GPU Offload in Rust: Portable, Safe, and Fast

https://arxiv.org/abs/2608.13759
208•linggen•14h ago•42 comments

The Road to MS-DOS 2.0

https://nemanjatrifunovic.substack.com/p/the-road-to-ms-dos-2
67•whobre•5d ago•25 comments

An update on leaving Gmail for Fastmail

https://moddedbear.com/an-update-on-leaving-gmail-for-fastmail/
215•neogodless•15h ago•134 comments

Israel creates fake think tank in likely attempt to dupe AI chatbots

https://responsiblestatecraft.org/israel-influence-chatgpt/
447•DeepLogin•11h ago•290 comments

GPT 5.6 Sol is the best "vision" model OpenAI ever released

https://blog.roboflow.com/openai-gpt-5-6/
337•plurby•20h ago•161 comments

Exercise intensity modulates interorgan communication and is associated with

https://www.cell.com/cell-reports-medicine/fulltext/S2666-3791%2826%2900405-2?_returnURL=https%3A...
10•newsomix9xl•3h ago•1 comments

AI;DR (AI; Didn't Read)

https://www.rickmanelius.com/p/aidr-ai-didnt-read
851•mooreds•12h ago•523 comments

Judge sets framework for Nine PBS to retrieve archival data

https://current.org/2026/08/judge-sets-framework-for-nine-pbs-to-retrieve-archival-data/
163•qingcharles•16h ago•62 comments

Climbing Guide as a Shared Infrastructure

https://irz.fr/en/articles/openclimbing-open-guide-en/
12•zbycz•1d ago•4 comments

How to disable or avoid intrusive AI

https://www.librarian.net/notoai/
295•ColinWright•18h ago•174 comments

Repair Cafe – Fix Your Broken Items

https://www.repaircafe.org/
99•rglover•9h ago•15 comments

Los Puesteros, solitary men who look after ranches and livestock in Patagonia

https://www.newyorker.com/culture/photo-booth/the-lonely-men-at-the-end-of-the-world
143•bookofjoe•14h ago•49 comments

Sun Clock

https://sunclock.net/
223•Gecko4072•16h ago•73 comments

India has paved the way for charging merchants a fee on UPI transactions

https://www.bbc.com/news/articles/c8xnwqe00v1o
144•monkey_monkey•13h ago•172 comments

How do functions like alloca allocate memory from the stack?

https://devblogs.microsoft.com/oldnewthing/20260817-40/?p=112617
55•ingve•11h ago•31 comments

A digestion of the proof of Sendov's conjecture

https://terrytao.wordpress.com/2026/08/12/a-digestion-of-the-proof-of-sendovs-conjecture/
35•surprisetalk•4d ago•11 comments

Launch HN: Speko (YC S26) – OpenRouter for Voice AI

https://speko.ai/
101•abdik•17h ago•58 comments

A particle made of force: physicists say they've found mysterious 'glueball'

https://www.nature.com/articles/d41586-026-02498-1
131•Brajeshwar•5d ago•40 comments

Ask HN: Alternatives to GitHub

586•dhruv3006•18h ago•368 comments

scScript for Linux

https://scapplications.com/
33•OptionOfT•10h ago•11 comments