frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Migrating from Go to Rust

https://corrode.dev/learn/migration-guides/go-to-rust/
44•jabits•2h ago•7 comments

CBP Directive 3340-049B: Border Search of Electronic Devices

https://www.cbp.gov/document/directives/cbp-directive-no-3340-049b-border-search-electronic-devices
31•Ember_Wipe•1h ago•2 comments

DeepSeek reasonix, DeepSeek native coding agent with high caching and low cost

https://esengine.github.io/DeepSeek-Reasonix/
325•Alifatisk•8h ago•162 comments

Memory has grown to nearly two-thirds of AI chip component costs

https://epoch.ai/data-insights/ai-chip-component-cost-shares
217•intelkishan•4h ago•231 comments

Australia Four-Day Work Week Study Data Shows Boosted Productivity

https://scienceaim.com/australia-just-proved-the-four-day-work-week-works-here-is-what-the-data-a...
69•randycupertino•2h ago•25 comments

Using HTTP/2 Cleartext for a server in Go 1.24

https://www.clarityboss.com/blog/go-http2-cleartext-h2c-cloud-run
16•dan_sbl•5d ago•2 comments

Constraint Decay: The Fragility of LLM Agents in Back End Code Generation

https://arxiv.org/abs/2605.06445
137•wek•8h ago•66 comments

Defeating Git Rigour Fatigue with Jujutsu

https://ikesau.co/blog/defeating-git-rigour-fatigue-with-jujutsu/
14•ikesau•2h ago•0 comments

Claude is not your architect. Stop letting it pretend

https://www.hollandtech.net/claude-is-not-your-architect/
173•cdrnsf•2h ago•117 comments

I spent 50 hours drawing a line graph

https://www.dougmacdowell.com/50-hours-to-draw-some-lines.html
367•dougdude3339•3d ago•64 comments

Mastering Dyalog APL

https://mastering.dyalog.com/README.html
115•tosh•9h ago•30 comments

Noroboto: Lying Fonts and Mitigation in Rust

https://tritium.legal/blog/noroboto
31•piker•2d ago•19 comments

Build Adafruit projects right from Firefox

https://www.firefox.com/en-US/landing/adafruit/
69•mch82•2d ago•16 comments

Flick (YC F25) Is Hiring Front End Engineer to Build Figma for AI Filmmaking

https://www.ycombinator.com/companies/flick/jobs/Tdu6FH6-senior-frontend-engineer
1•rayruiwang•4h ago

Microsoft open-sources "the earliest DOS source code discovered to date"

https://arstechnica.com/gadgets/2026/04/microsoft-open-sources-the-earliest-dos-source-code-disco...
398•DamnInteresting•19h ago•133 comments

Greg Brockman interview [video]

https://fs.blog/knowledge-project-podcast/greg-brockman/
149•prakashqwerty•12h ago•133 comments

Ruby for Good

https://ti.to/codeforgood/rubyforgood
94•mooreds•5h ago•36 comments

Childhood Computing

https://susam.net/childhood-computing.html
133•blenderob•9h ago•71 comments

Usborne 1980s Computer Books

https://usborne.com/us/books/computer-and-coding-books
133•ngram•5h ago•41 comments

LAN-LOK: The Antarctic DOS Sabotage Game Lost for 34 Years

https://alphapixeldev.com/lan-lok-the-antarctic-dos-sabotage-game-lost-for-34-years-part-1/
3•miffe•3d ago•0 comments

Perceptual Image Codec: What Matters in Practical Learned Image Compression

https://apple.github.io/ml-pico/
74•ksec•9h ago•21 comments

Don't know where your data is from? Bayesian modeling for unknown coordinates

https://christopherkrapu.com/blog/2026/dont-know-where-your-data-is-from/
18•ckrapu•3h ago•0 comments

Why Physical Reality Is a Collective Construction

https://mimetra.com/blog/consciousness-fusion/
3•mw67•1h ago•0 comments

I keep bouncing off the Scheme language

https://www.sicpers.info/2026/05/i-keep-bouncing-off-the-scheme-language/
116•ingve•2d ago•45 comments

Scammers are abusing an internal Microsoft account to send spam links

https://techcrunch.com/2026/05/21/scammers-are-abusing-an-internal-microsoft-account-to-send-spam/
251•spike021•20h ago•138 comments

DeepSeek to Make Permanent 75% Discount on Flagship AI Model

https://www.bloomberg.com/news/articles/2026-05-23/deepseek-to-make-permanent-75-discount-on-flag...
166•moh_maya•6h ago•2 comments

Wake up! 16b

https://hellmood.111mb.de/wake_up_16b_writeup.html
386•MaximilianEmel•20h ago•28 comments

Why is Vivado 2026.1 dropping Linux support for free tier?

https://adaptivesupport.amd.com/s/question/0D5Pd00001YQLdMKAX/why-is-vivado-20261-dropping-linux-...
277•zdw•16h ago•158 comments

Curly braces: An evolution of Unix and C

https://thalia.dev/blog/unix-braces/
41•thaliaarchi•4d ago•8 comments

Book Review: On the Calculation of Volume

https://www.stephendiehl.com/posts/calculation_of_volume/
18•ibobev•3d ago•3 comments