RE: https://mastodon.archive.org/@brewsterkahle/117481215431503956

This toot should go into the anthropic IPO briefing as the actualization of their business model. Everyone having to spent their own tokens on the (roughly) same (probably incomplete) fix is a wet dream for those who hate commons and collectivism.

This is the last stop before "why do we need maintainers and security releases anyway? We just fork our own php"

THE project for the commons bragging about it is nothing but tragic though.

With all the supply-chain attacks going on, we sat down and condensed our advise into notes we publish in the following weeks. We'll start with dependency management, when to update what and how to disable default insecure behavior in common tooling like VSCode or npm. https://crftd.tech/blog/2026-05-30-notes-on-safer-development/