frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Karpathy’s Pelican

https://twitter.com/karpathy/status/2083749667410727319
82•delichon•13h ago•44 comments

How the words we teach English language learners changed

https://pudding.cool/2026/07/essential-words/
80•c-oreills•1h ago•32 comments

Show HN: Kakehashi – Experimental userspace to run macOS binaries on Linux ARM

https://github.com/wie-project/kakehashi
20•vlad_kalinkin•1h ago•8 comments

Show HN: NixOS-DGX-Spark – Nix and NixOS on the DGX Spark

https://github.com/graham33/nixos-dgx-spark
7•graham33•21m ago•2 comments

Twenty Years of RISC OS Open

https://www.riscosopen.org/news/articles/2026/06/20/twenty-years-of-risc-os-open
99•AlexeyBrin•4h ago•15 comments

F*: A general-purpose proof-oriented programming language

https://fstar-lang.org/
80•ducktective•4h ago•32 comments

Rooting, firmware analysis and persistent credentials of TP-Link TL-841N

https://blog.juni-mp4.com/posts/42/rooting-the-tplink-tl841n-pt1/
13•mindracer•1h ago•1 comments

Meshdiff – visually compare two STL versions in the browser, client-side

https://meshdiff.com/
134•projscope•5h ago•13 comments

GE-97 Terminal: The Old Internet

https://ge97.com/
8•classichasclass•46m ago•0 comments

Fasttracker II clone in C using SDL 2

https://16-bits.org/ft2.php
60•andsoitis•4d ago•18 comments

Folding Paper Globes

https://foldingglobes.com/globes
86•dango2506•4d ago•12 comments

When transit passes were designed by hand

https://letterformarchive.org/news/milwaukee-transit-passes/
29•nate•2d ago•7 comments

Show HN: Bor – Open-source policy management for Linux desktops

https://getbor.dev/blog/2026-08-02-bor-v080-release/
133•eniac111•8h ago•19 comments

Norway Salmon

https://www.abc.net.au/news/2026-07-28/how-norway-s-salmon-industry-became-a-global-behemoth/1069...
72•CHB0403085482•5d ago•27 comments

Show HN: Fuse – statically typed functional programming language

https://fuselang.org
69•the_unproven•6h ago•10 comments

Artificial Intelligence: Ars Notoria and the Promise of Instant Knowledge

https://publicdomainreview.org/essay/ars-notoria/
97•jruohonen•7h ago•23 comments

Great Question (YC W21) Is Hiring Senior Demand Gen Manager

https://www.ycombinator.com/companies/great-question/jobs/YutDxyf-senior-demand-generation-manager
1•nedwin•5h ago

Go 1.27 Interactive Tour

https://victoriametrics.com/blog/go-1-27/index.html
309•Hixon10•15h ago•154 comments

Rust All Hands 2026 Retrospective

https://blog.rust-lang.org/inside-rust/2026/07/31/all-hands-2026-retrospective/
54•dcminter•6h ago•19 comments

A Rant About “Technology” (2005)

https://www.ursulakleguin.com/a-rant-about-technology
99•jamesgill•2h ago•55 comments

Show HN: I'm a 15 Year Old Wannabe Engineer, This Is a Cycloidal Gearbox I Built

https://github.com/tom-ilan/cycloidal_gearbox
269•tomilan•15h ago•88 comments

Holocloth

https://holocloth.vercel.app
107•ingve•2d ago•20 comments

Diátaxis

https://diataxis.fr/
461•ryanseys•20h ago•54 comments

Linux Desktop Market Share Surpasses 10% in North America

https://linuxiac.com/linux-desktop-market-share-surpasses-10-in-north-america/
8•leephillips•37m ago•2 comments

MkLinux and the pimped-out Apple Workgroup Server 9150

http://oldvcr.blogspot.com/2026/08/mklinux-and-pimped-out-apple-workgroup.html
93•goldenskye•14h ago•9 comments

Show HN: Syncular – offline-first SQL sync with TypeScript and Rust cores

https://github.com/syncular/syncular
61•quambo•7h ago•22 comments

Seedance 2.5

https://seed.bytedance.com/en/blog/one-take-creation-flexible-referencing-introducing-seedance-2-5
414•njaremko•20h ago•234 comments

ESP32-C3 SuperMini antenna modification

https://peterneufeld.wordpress.com/2025/03/04/esp32-c3-supermini-antenna-modification/
53•ta988•10h ago•8 comments

Running Kimi K3 on MI355X at Better Performance per Dollar Than B300

https://www.wafer.ai/blog/kimi-k3-mi355x
191•ilreb•13h ago•92 comments

Show HN: Katharos Functional programming and CSP-style concurrency for Python

https://github.com/kamalfarahani/katharos
25•kamalf•6h ago•7 comments