Lmst

#dependencycooldowns

For those of you reading about dependency cooldowns recently and wanting to try it out with uv, beware GitLab’s python package repository does not support it. It needs to expose the necessary metadata still https://gitlab.com/gitlab-org/gitlab/-/issues/581770

Your download will fail with a much of “is missing an upload date, but user provided: <date-string>”
#dependencycooldowns #uv #gitlab

I got too excited about "set-and-forget" relative dependency cooldowns coming to #pip that I hacked them together using cron and a script that calculates uploaded-prior-to in pip.conf 👀

https://sethmlarson.dev/pip-relative-dependency-cooling-with-crontab

#python #pypi #dependencycooldowns #security

🚨 Alert: Another self-proclaimed tech guru has discovered the magical elixir of "dependency cooldowns" that apparently solves all #open-source #security woes. 💡 Spoiler: It's just another buzzword for "delay your updates" — because clearly, the best way to secure your software is to procrastinate. 😏
https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns #techbuzzwords #procrastination #softwareupdates #dependencycooldowns #HackerNews #ngated