Let the community get together and win this
Kubesimplify exists because of Saiyam and today is the time to give it back
Use this link to signup to Local AI(which will help you anyways) and let the community win.
Quiz: on a fresh clone + build of a Rust or Node project, which runs first on your machine?
A) your code
B) your dependency's build script
Think about it in the context of this morning's arrayref disclosure. Answer tomorrow, 1:30 PM.
If you build Rust anywhere (CI or laptops), check today: arrayref 0.3.10 is malicious.
Compromised maintainer account.
It pulls proc-macro1, a typosquat published under a forged account.
Payload runs at COMPILE time.
Audit lockfiles for arrayref 0.3.10, internment 0.8.7,
Your platform team shouldn't spend a year gluing together 20 CNCF tools just to watch developers ignore the result.
@openchoreo is a CNCF Sandbox IDP (WSO2 → CNCF, Apache 2.0) that takes a different path:
~30 lines of developer intent YAML
→ real K8s objects, continuously
Mojo 1.0 is open source: full compiler + tooling, Apache 2.0, unrestricted.
Three weeks after Qualcomm acquired Modular.
Targets: AWS Trainium, Google TPUs, Qualcomm data-center silicon, NVIDIA, AMD, CPUs.
A chip vendor open-sourcing the run-on-any-chip language is the