2026-08-07T08:43:08Z https://njump.cloud.vinney.xyz Nils Adermann https://njump.cloud.vinney.xyz/npub17cmkpeswh0rgyf83cr94tm3a42a3hj8tvleh30qlg6kjkzd6079sjcsfdk https://media.phpc.social/accounts/avatars/000/054/443/original/0658161b4e2ea5d7.jpg https://media.phpc.social/accounts/avatars/000/054/443/original/0658161b4e2ea5d7.jpg https://njump.cloud.vinney.xyz/nevent1qqsfgmusnn47rld7zpjv6lvw765ney7qtz7s53f9nq5x9mz6sgejpygzyrmrwc8xp6audq3y78qvk40w8k4tkx7gadnlx79urar262cfhflcka8ajqf <br/><br/>Open infrastructure isn&#39;t free. 🌱<br/><br/>Packagist/Composer signed a joint <br/>OpenSSF letter with PyPI, crates, Maven, CPAN, etc on real cost of running package registries.<br/><br/>Packagist needs to finance staff, not just hardware and bandwidth. Contact me if your company&#39;s interested in joining our sponsorship program for its launch this month while we work on long term solutions.<br/><br/>#php #phpc #composerphp #softwaresupplychain #PreserveOpenSource #FreeSoftwareIsntFree #OpenSource #Sustainability<br/><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/nevent1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq0jwwzk57gcdrlfudpvln9a24mcd8vp9e0jqp96cl38dfdd6vv5vsyzc8n7" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">nevent1q…c8n7</a></span> </div> Open Infrastructure Is Not Free. Part II is here.<br/><br/>10 trillion open source package downloads in 2026. More than 1 billion per hour. Still running on donations and volunteers.<br/><br/>AI is accelerating consumption and attacks. Registry leaders have formed the Sustaining Package Registries WG to change that.<br/><br/>Read Part II: <a href="https://openssf.org/blog/2026/05/06/open-infrastructure-is-not-free-part-ii-the-hidden-cost-of-running-package-registries/">https://openssf.org/blog/2026/05/06/open-infrastructure-is-not-free-part-ii-the-hidden-cost-of-running-package-registries/</a><br/><br/>#PreserveOpenSource #FreeSoftwareIsntFree<br/><br/> <img src="https://cdn.masto.host/sociallfxdev/media_attachments/files/116/527/088/872/001/591/original/ad7e1576893b6cb2.jpg"> </blockquote> 2026-05-06T12:41:18Z https://njump.cloud.vinney.xyz/nevent1qqspp37javmzt6y8gav6k30a73frnk08fajsu4mqyctn7hd9t0ykugszyrmrwc8xp6audq3y78qvk40w8k4tkx7gadnlx79urar262cfhflckhuswt6 Will you be in Amsterdam June 17th, or can you make it there? Join us to celebrate PHP turning 30 🎂 after #phpverse at Café Restaurant Dauphine with AmsterdamPHP from 6:30pm - RSVP <a href="https://www.meetup.com/amsterdamphp/events/307306474/">https://www.meetup.com/amsterdamphp/events/307306474/</a> #php #phpc 2025-05-27T12:02:03Z https://njump.cloud.vinney.xyz/nevent1qqstlcxdc3ek64vjpr4fvg3j4nwmtjf06cc3mqrp32g77prgel7rg6qzyrmrwc8xp6audq3y78qvk40w8k4tkx7gadnlx79urar262cfhflcknpg6ak Stop by our <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq5wfmwp44tnnu0mpkdptvyf9dq0eemlr4n2xpajdff5st99jk5ldsudy04j" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq5wfmwp44tnnu0mpkdptvyf9dq0eemlr4n2xpajdff5st99jk5ldsudy04j</span> (<span class="italic">nprofile…y04j</span>)</a></span> booth at #LaraconEU and have a chat about Composer, Packagist, Conductor or anything else relating to dependency management and supply chain security! #Laravel #Laracon<br/><br/> <img src="https://media.phpc.social/media_attachments/files/113/939/002/239/860/731/original/5676879e94658f18.jpg"> 2025-02-03T08:27:15Z https://njump.cloud.vinney.xyz/nevent1qqswcy6cuna2zttuutdw2rn0du5sd4528h2tjqq0dpv5f8kjtrrnk4gzyrmrwc8xp6audq3y78qvk40w8k4tkx7gadnlx79urar262cfhflckye0j4m Great overview of security pitfalls in GitHub Actions that should be required viewing for anyone working with GHA by <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqnlp5g9a4ysruta8n57s4mrh66h3z5kjyc8sple6ge9wzdqtapcuqmcsp92" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqnlp5g9a4ysruta8n57s4mrh66h3z5kjyc8sple6ge9wzdqtapcuqmcsp92</span> (<span class="italic">nprofile…sp92</span>)</a></span> - read the detailed slides at <a href="https://fosdem.org/2025/schedule/event/fosdem-2025-6543-hunting-for-github-actions-bugs-with-zizmor/">https://fosdem.org/2025/schedule/event/fosdem-2025-6543-hunting-for-github-actions-bugs-with-zizmor/</a> #FOSDEM 2025-02-01T17:19:15Z https://njump.cloud.vinney.xyz/nevent1qqsq825j80dsstx9khukn33tqlrupvpxg9e9jk3ds6d907jdudz4syqzyrmrwc8xp6audq3y78qvk40w8k4tkx7gadnlx79urar262cfhflckqd20yu After the panel on &#34;when are AI systems free/open&#34; at #FOSDEM I struggle to see why we don&#39;t just equate ML/training to compilers. They take data (source code for compiler, corpus for AI) and turn them into a decision making program (machine code for compiler, weights for AI model). Clearly a program doesn&#39;t become open source by distributing it in binary form/weights, and a whole AI system can only be open source if all of its components are: compiler (ML/training process) and program (model)? 2025-02-01T13:35:24Z https://njump.cloud.vinney.xyz/nevent1qqs94lcl5jfn7u9kg7l54dgqcm53kvrgk7mdcpcclywczqzxv2czfqczyrmrwc8xp6audq3y78qvk40w8k4tkx7gadnlx79urar262cfhflck4h4ff6 Wrote down my thoughts on PHP Property Hooks added in 8.4 - ironically while I am a fan of the feature I think of it as a kind of insurance, you&#39;re best off if you don&#39;t need it at all - <a href="https://blog.naderman.de/2024/12/12/php-property-hooks-a-cost-of-change-insurance/">https://blog.naderman.de/2024/12/12/php-property-hooks-a-cost-of-change-insurance/</a><br/>#php #phpc 2024-12-12T11:05:15Z