Blog.

Plain-language notes on keeping the packages you install safe.

Short reads from the masthead.

• What is slopsquatting?

  An AI assistant can suggest a package that does not exist. An attacker can make it exist.2026-10-07 · 4 min read

• How to stay safe from malicious packages.

  Five habits that take under a minute each.2026-10-07 · 3 min read

• What to do when Crowsnest says Hold.

  A calm, step-by-step way to read the call and take the first step.2026-10-07 · 3 min read

• Crowsnest 0.1.0 release notes.

  What is in version 0.1.0 while it is in development, and what it cannot do yet.2026-10-07 · 3 min read · Unreleased