Flux
vlt 1.5.0 Adds Agent Skills Management
Nouveau

vlt 1.5.0 Adds Agent Skills Management

JavaScript packages increasingly ship instructions for coding agents alongside their code. But installing a package doesn’t necessarily put those instructions somewhere an agent will find them. Developers can end up copying skill files into their projects by hand, then having to keep those copies current as dependencies change. vlt 1.5.0 brings that work into the package manager. Its new vlt skills command discovers skills in installed dependencies and links them into the directories coding…

Socket
eMudhra Intermediate CA Compromise
Nouveau

eMudhra Intermediate CA Compromise

eMudhra Intermediate CA Compromise This is very, very bad news: The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores. Any software that bundles a list of trusted certificates needs to be updated. This site is tracking software updates via this GitHub repository - Linux distros need to update their ca-certificates packages. In Python world uv…

Simon Willison's Weblog
Battle Drones - a vibe coded RTS with audio-based multiplayer
Nouveau

Battle Drones - a vibe coded RTS with audio-based multiplayer

My latest vibe coded game experiment is a Command & Conquer style RTS (Real Time Strategy) game called Battle Drones (play it here). Unlike my previous experiments, this one is actually fun to play. I'm somewhat embarrassed to admit that I got there by telling Claude to "Make it a LOT more fun". It also supports multiplayer between nearby devices using audio to synchronize game state! Here's what I've built so far, and some of the things I learned along the way. Battle Drones How I built…

Simon Willison's Weblog
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Nouveau

Rust 1.100 Will Add Dependency Cooldowns to Cargo

Rust developers will soon be able to tell Cargo to wait before adopting newly published dependencies. Rust 1.100, scheduled for November 12, will bring stable support for a configurable minimum publish age, letting teams delay dependency updates to give researchers and maintainers time to detect malicious releases before more projects pull them in. The stabilization PR merged on August 28, and Rust’s draft release notes list the feature for 1.100. The setting is available on beta but has not…

Socket
My obituary for programming
Récent

My obituary for programming

My obituary for programming Jeremy Scheff poignantly captures the key loss caused by coding agents for career programmers who enjoyed the puzzle of developing code: Programming turned into one of the greatest jobs you could imagine. You got paid to work on tricky little logic puzzles. The trickier the puzzle, the more you got paid. But even pretty simple puzzles were worth a lot of money because regular people just couldn't do it! No, they needed us. They would give us a problem and we would…

Simon Willison's Weblog
AI Changed How We Code. It Hasn’t Changed How We Work Together.
Récent

AI Changed How We Code. It Hasn’t Changed How We Work Together.

This summer, I built a small experiment called ContextCue. The idea came from something I kept seeing during my internship. The engineers around me were using AI everywhere in the software development process. GitHub Copilot and Claude models helped with specs, code, reviews, and tests. The team also maintained reusable skills that taught coding agents […]

O'Reilly Radar — AI/ML