frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

My security camera shipped a GitHub admin token in its login page

https://hhh.hn/hanwha-github-token/
95•hhh•2h ago•27 comments

Flux 3 X Mimic: The Next Generation of Video-Action Models

https://bfl.ai/blog/flux-3-mimic
207•kensai•4h ago•27 comments

It's getting harder to focus every day

https://glyphack.com/attention/
349•peykar•6h ago•178 comments

India's first privately-developed rocket reaches orbit on dramatic debut launch

https://arstechnica.com/space/2026/07/indias-first-privately-developed-rocket-reaches-orbit-on-dr...
75•sohkamyung•4d ago•10 comments

Flux 3

https://bfl.ai/blog/flux-3
438•ThouYS•8h ago•111 comments

IRGC Claims It Destroyed Amazon's Bahrain Data Center

https://houseofsaud.com/irgc-claims-destroyed-amazon-bahrain-data-center/
81•thisislife2•4h ago•33 comments

Buz – A fork of Bun using modern Zig, with sub-1s incremental builds

https://ziggit.dev/t/buz-a-drop-in-replacement-for-bun-using-modern-zig-with-sub-1s-incremental-b...
123•kristoff_it•4h ago•83 comments

Em dashes are fucking amazing

https://psychotechnology.substack.com/p/em-dashes-are-fucking-amazing
85•surprisetalk•1h ago•74 comments

The IBM PC, Part 1: Arrival

https://technicshistory.com/2026/07/24/the-ibm-pc-part-1-arrival/
35•cfmcdonald•3h ago•9 comments

Programming language file extensions that match ISO 3166-1 alpha-2 country code

https://www.bruh.ltd/blog/programming-language-file-extensions-that-match-an-iso-3166-1-alpha-2-c...
21•speckx•1h ago•8 comments

Oracle fires 21,000 employees to fund AI spending

https://www.jpost.com/business-and-innovation/tech-and-start-ups/article-903442
30•DemiGuru•47m ago•5 comments

Claude Cookbook

https://platform.claude.com/cookbook/
184•saikatsg•9h ago•86 comments

Kaizen #4: Overhauled Homelab

https://timharek.no/blog/kaizen-4/
5•meysamazad•34m ago•0 comments

Game of Trees – Git-based version control from OpenBSD folks

https://www.gameoftrees.org/
30•gregnavis•4h ago•1 comments

Why is programming so captivating, yet so agonizing?

https://elsewhere.news/en/zhenfund/why-is-programming-so-captivating-yet-so-agonizing
21•ilreb•2h ago•14 comments

Open Weights and American AI Leadership [pdf]

https://images.nvidia.com/pdf/Open-Weights-and-American-AI-Leadership.pdf
10•lairv•22m ago•0 comments

Nothing works and everyone is euphoric

https://ptrchm.com/posts/nothing-works-and-everyone-is-euphoric/
206•pchm•5h ago•161 comments

How Do We Stop Vibe Coding?

https://alexklos.ca/blog/how-do-we-stop-vibe-coding
28•prohobo•4h ago•22 comments

Computational chemistry, Locally? My rant on SSH

https://chillphysicsenjoyer.substack.com/p/computational-chemistry-locally
27•crescit_eundo•2d ago•17 comments

Show HN: Echo – Fable-level results at 1/3 the cost using open-weight models

423•adam_rida•18h ago•205 comments

Patreon laying off 20% of staff

https://www.patreon.com/jackconte/posts/painful-update-164628951
103•gpi•1h ago•147 comments

The Book Prize Index

https://book-prize-index.vercel.app
40•Luc•5h ago•3 comments

Tangleflow: Converts GitHub Actions workflows to tangled workflows and back

https://github.com/43081j/tangleflow
20•wertyk•2d ago•7 comments

Writing by hand is good for your brain

https://nealstephenson.substack.com/p/writing-by-hand-is-good-for-your
1376•dwwoelfel•23h ago•625 comments

AMD's Instinct MI455X: Aiming for the Sun

https://chipsandcheese.com/p/amds-instinct-mi455x-aiming-for-the
50•ingve•7h ago•23 comments

The story behind APC-2

https://teenage.engineering/now
7•firloop•3d ago•1 comments

Hetzner is working on LLM Inference

https://sliplane.io/blog/hetzner-inference
103•jonas_scholz•4h ago•44 comments

I regret migrating to Codeberg

https://xn--gckvb8fzb.com/i-regret-migrating-to-codeberg/
423•boramalper•1d ago•326 comments

Startup founders urge U.S. government not to shut off Chinese open weight AI

https://www.politico.com/news/2026/07/22/startup-founders-urge-trump-not-to-shut-off-chinese-open...
1010•theanonymousone•23h ago•827 comments

I Tried Building a Real App with AI. It Took a Year

https://www.alexhyett.com/videos/tried-building-app-with-ai-it-took-a-year/
59•surprisetalk•2h ago•56 comments