# packages Published articles for packages. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Void Linux Maintainer Orphans 100+ Packages Over AI Policy Dispute DevFeed: [Void Linux Maintainer Orphans 100+ Packages Over AI Policy Dispute]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-12T15:11:26Z Content type: news Language: en Sources: [Phoronix]() Topics: [Linux](), [Artificial Intelligence](), [Large Language Model](), [pull-requests]() Tags: [ai](), [desktop-linux](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [llm](), [open-source-graphics](), [opencode](), [packages](), [phoronix](), [phoronix-test-suite](), [policy](), [pull-request](), [ubuntu-benchmarks](), [ubuntu-hardware]() ### AI overview A Void Linux maintainer orphaned 113 packages after a dispute over the project's policy on using generative AI. The dispute followed the use of GLM-5.3-Flash with OpenCode to generate comparison text for a Go package update without disclosing the AI usage. ### Source excerpt A Void Linux maintainer has orphaned more than 100 packages he maintained over a dispute of the project's AI policy for LLM-generated text... ## Ubuntu Developers Contemplate Linux Firmware HWE Package DevFeed: [Ubuntu Developers Contemplate Linux Firmware HWE Package]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-12T10:25:11Z Content type: news Language: en Sources: [Phoronix]() Topics: [Ubuntu](), [Linux](), [Hardware](), [releases]() Tags: [amd](), [canonical](), [desktop-linux](), [developers](), [enablement](), [firmware](), [hardware](), [kernel](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [lts](), [open-source-graphics](), [packages](), [phoronix](), [phoronix-test-suite](), [ubuntu](), [ubuntu-benchmarks](), [ubuntu-hardware]() ### AI overview Ubuntu developers are considering a linux-firmware-hwe package tied to Hardware Enablement kernels on Ubuntu LTS releases. The proposal aims to align firmware with newer HWE kernels while reducing regressions for systems using the original GA kernels. ### Source excerpt A possible future enhancement being considered for Ubuntu Long Term Support "LTS" releases is the introduction of a linux-firmware-hwe package as part of their hardware enablement (HWE) stack... ## Ubuntu 24.04.5 LTS Released With Linux 7.0 HWE Stack DevFeed: [Ubuntu 24.04.5 LTS Released With Linux 7.0 HWE Stack]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-10T17:49:03Z Content type: news Language: en Sources: [Phoronix]() Topics: [Ubuntu](), [Linux](), [Deployment](), [GPU](), [Hardware]() Tags: [deployment](), [desktop-linux](), [drivers](), [gpu](), [graphics](), [hardware](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [lts](), [open-source-graphics](), [packages](), [phoronix](), [phoronix-test-suite](), [release](), [ubuntu](), [ubuntu-benchmarks](), [ubuntu-hardware](), [updates]() ### AI overview Ubuntu 24.04.5 LTS is a new point release that includes recent stable updates and a hardware enablement stack based on Linux 7.0, Mesa 26.0 graphics drivers, and related packages. The update is intended to simplify initial installation on new systems and improve support for newer hardware. ### Source excerpt For those continuing to make use of the Ubuntu 24.04 Long Term Support "LTS" series, Ubuntu 24.04.5 LTS is out today as the newest point release... ## Cellular Network Infrastructure - Removal of binary package feeds for Debian 11 (bullseye) DevFeed: [Cellular Network Infrastructure - Removal of binary package feeds for Debian 11 (bullseye)]() Original publisher: [Read original article]() Author: osmith Published: 2026-09-07T13:01:53Z Content type: news Language: en Sources: [Open Source Mobile Communications: News]() Topics: [Debian]() Tags: [2026](), [bug](), [debian](), [end-of-life](), [issue](), [os](), [packages](), [repositories](), [tracker]() ### AI overview Osmocom plans to stop building binary packages for Debian 11 in its repositories on December 7, 2026, because Debian 11 has reached end of life. Customers needing continued access can contact sysmocom about commercial long-term support. ### Source excerpt Debian 11 has reached its End Of Life. We plan to stop building Osmocom packages for it in our binary package repositories in three months (2026-12-07). If you are still continue to require Debian 11 binary packages, please contact sales sysmocom.de to discuss commercial terms for long-term support. ## I moved my laptop to a rolling-release distro and the snapshots did the heavy lifting DevFeed: [I moved my laptop to a rolling-release distro and the snapshots did the heavy lifting]() Original publisher: [Read original article]() Author: Shed Stack Published: 2026-09-06T18:00:00Z Content type: opinion Language: en Sources: [Shed Stack]() Topics: [btrfs](), [Kernel](), [Hardware]() Tags: [boot](), [bootloader](), [btrfs](), [driver](), [laptop](), [packages](), [rollback](), [snapshots](), [update]() ### AI overview The author describes moving a laptop to CachyOS, a rolling-release distribution, to obtain newer kernels and packages. Automatic Btrfs snapshots managed with snapper provide rollback protection when updates affect boot components, drivers, or the desktop. ### Source excerpt CachyOS, snapper, and the DPTF fix. What a rolling release is actually like when you keep a parachute. ## VoIP, VPN, and the Build System Behind Them DevFeed: [VoIP, VPN, and the Build System Behind Them]() Original publisher: [Read original article]() Author: Shai Almog Published: 2026-09-04T00:00:00Z Content type: article Language: en Sources: [CodeName One]() Topics: [Virtual Private Network](), [cross-platform](), [API](), [iOS](), [Android](), [Java](), [Framework](), [Extension]() Tags: [android](), [apis](), [build](), [build-system](), [extension](), [integration](), [java](), [native](), [packages](), [platform](), [signing](), [vpn]() ### AI overview Codename One adds native call-management and VPN APIs for iOS and Android. Its builders generate the required platform services, frameworks, permissions, delegates, and separately signed extension targets based on the Java packages an application uses. ### Source excerpt Codename One adds native call management and VPN APIs, while its builders generate the platform services, frameworks, permissions, and extension plumbing only when an application uses them. ## 5 QE Pipeline Metrics That Show Where Quality Is Leaking DevFeed: [5 QE Pipeline Metrics That Show Where Quality Is Leaking]() Original publisher: [Read original article]() Author: Rick Crawford Published: 2026-08-21T15:00:10Z Content type: article Language: en Sources: [Postman Blog]() Topics: [Development](), [Postman]() Tags: [api-testing](), [developer](), [development](), [false-positives](), [general](), [metrics](), [packages](), [policy](), [production](), [qe-program](), [quality-engineering](), [sdlc](), [shift-left](), [validation]() ### AI overview This developer article presents five quality-engineering pipeline metrics aligned with Design, Gate, Validate, Monitor, and Improve stages. The supplied text details package adoption, gate coverage and flake rate, and defect escape rate, explaining how they reveal uneven coverage, ineffective merge gates, false positives, and defects reaching production. ### Source excerpt In the last post I described six problems that compound when development outruns the QE infrastructure underneath it. Most leaders recognize all... The post 5 QE Pipeline Metrics That Show Where Quality Is Leaking appeared first on Postman Blog. ## The New Default Nix Flake Template Explained DevFeed: [The New Default Nix Flake Template Explained]() Original publisher: [Read original article]() Author: Jacek Galowicz Published: 2026-08-17T00:00:00Z Content type: tutorial Language: en Sources: [Nixcademy Blog]() Topics: [Nix](), [Template](), [Development](), [Tooling]() Tags: [architecture](), [how-to](), [learn](), [packages](), [patterns](), [shell](), [standard](), [template]() ### AI overview An explanation of the new default Nix flake template, which supports multiple platforms without flake-utils. The article describes the underlying pattern, how to extend it for real projects, and its limitations and advanced cases. ### Source excerpt The default Nix flake template is now multi-platform without flake-utils. Learn how the new pattern works and how to extend it for real projects. ## The Appwrite CLI is now written in Go DevFeed: [The Appwrite CLI is now written in Go]() Original publisher: [Read original article]() Author: Chirag Aggarwal Published: 2026-08-11T00:00:00Z Content type: article Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [Command-line interface](), [Go Language](), [npm](), [TypeScript](), [JSON]() Tags: [announcements](), [cli](), [dependencies](), [go](), [json](), [npm](), [packages](), [typescript]() ### AI overview Appwrite rewrote its CLI from TypeScript and Node to Go while preserving the command surface, flags, exit codes, and JSON output. Measurements reported in the article show lower startup time, installation size, memory use during push, and binary size. ### Source excerpt The Appwrite CLI moves from TypeScript to Go. It starts 17 times faster and installs two packages in place of 330. Every flag, exit code, and byte of JSON output stays the same. ## Managing Imports With Python's \_\_all\_\_ DevFeed: [Managing Imports With Python's \_\_all\_\_]() Original publisher: [Read original article]() Author: Real Python Published: 2026-07-28T14:00:00Z Content type: tutorial Language: en Sources: [Real Python]() Topics: [Python](), [coding]() Tags: [best-practices](), [learn](), [packages](), [python](), [tutorial](), [video]() ### AI overview A video course explaining Python wildcard imports and how the __all__ variable controls which names modules and packages expose. It covers import behavior, public APIs, use cases, benefits, and best practices. ### Source excerpt Learn how Python's dunder all variable controls wildcard imports and shapes the public API your packages and modules expose. ## The missing link in developer velocity: Virtual registries and the rise of the Artifact Platform DevFeed: [The missing link in developer velocity: Virtual registries and the rise of the Artifact Platform]() Original publisher: [Read original article]() Author: Adrian Herrera Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Caching](), [CI/CD](), [developer velocity](), [Latency](), [Developer Platform]() Tags: [article](), [caching](), [ci-cd](), [cost](), [developer](), [developer-velocity](), [latency](), [packages](), [performance](), [platform](), [registry](), [saas](), [time]() ### AI overview The article explains how artifact retrieval slows CI/CD pipelines and reduces developer velocity. It presents virtual registries combined with high-performance caching as an acceleration layer that serves artifacts locally, reduces repeated downloads and latency, and lowers cloud egress costs. ### Source excerpt Virtual registries and high-performance caching cut CI/CD artifact download time, reduce egress costs, and boost developer velocity by turning artifact delivery into a core platform capability. ## @mastra npm scope takeover: 143 packages backdoored via compromised contributor account DevFeed: [@mastra npm scope takeover: 143 packages backdoored via compromised contributor account]() Original publisher: [Read original article]() Published: 2026-06-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [npm](), [Malware](), [Remote Access Trojan](), [Cryptocurrency](), [C2]() Tags: [c2](), [chainguard-libraries](), [chainguard-packages](), [command-and-control](), [crypto](), [malware](), [mastra](), [npm](), [npm-takeover](), [packages](), [provenance](), [remote-access](), [remote-access-trojan](), [secure-packages](), [software-packages](), [supply-chain](), [tls]() ### AI overview The article reports that an attacker used a compromised former contributor account to republish all 143 packages in the @mastra npm scope on June 17, 2026. The malicious versions could disable TLS verification, download a cryptocurrency wallet stealer and remote access trojan, and establish command-and-control access. It recommends auditing dependency trees and lockfiles and rotating credentials on affected hosts. ### Source excerpt A supply chain attack compromised all 143 @mastra packages. Chainguard customers stayed protected through malware blocking and source-built libraries. ## Mikrotik quietly adds features to the Winbox package updates DevFeed: [Mikrotik quietly adds features to the Winbox package updates]() Original publisher: [Read original article]() Author: j2sw Published: 2026-06-12T14:11:16Z Content type: news Language: en Sources: [Justin Wilson (j2sw)]() Topics: [MikroTik]() Tags: [features](), [mikrotik](), [network-engineering-resources](), [packages](), [rosv7](), [routeros](), [system](), [updates](), [updating]() ### AI overview MikroTik has added new features related to updating system packages in Winbox. The article provides few details and says more information will follow. ### Source excerpt Mikrotik has added some new features to system...packages as far as updating goes. More info to come soon. The post Mikrotik quietly adds features to the Winbox package updates appeared first on Justin Wilson (j2sw). ## The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware" DevFeed: [The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware"]() Original publisher: [Read original article]() Published: 2026-06-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Malware](), [Code](), [Open Source](), [npm](), [npm packages](), [Security]() Tags: [chainguard](), [chainguard-libraries](), [ecosystems](), [greyware](), [greyware-scanner](), [hardening](), [javascript](), [malware](), [malware-prevention](), [malware-scanner](), [npm](), [npm-packages](), [open-source](), [packages](), [scanner](), [security](), [source](), [supply-chain-attacks]() ### AI overview Chainguard has introduced a source code scanner that detects traditional malware and "greyware," harmful packages that may perform actions such as credential theft, command interception, API key harvesting, or persistent remote access. The scanner currently protects npm packages, scans more than 100,000 packages daily, and has blocked more than 52,000 packages identified as malware or greyware. ### Source excerpt Chainguard's new scanner blocks malware and 'greyware' before it reaches developers, protecting 100,000+ packages daily across open source ecosystems. ## Miasma Phantom Gyp npm attack: 57 packages, 286 malicious versions hijack CI/CD pipelines via binding.gyp DevFeed: [Miasma Phantom Gyp npm attack: 57 packages, 286 malicious versions hijack CI/CD pipelines via binding.gyp]() Original publisher: [Read original article]() Published: 2026-06-05T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [npm packages](), [Malware](), [Security](), [CI/CD](), [npm](), [chainguard libraries](), [chainguard]() Tags: [chainguard](), [chainguard-actions](), [chainguard-containers](), [chainguard-libraries](), [ci-cd](), [malware](), [miasma](), [npm-security](), [packages](), [phantom-gyp](), [shai-hulud](), [supply-chain]() ### AI overview This article describes the Miasma Phantom Gyp npm supply-chain attack, in which attackers published 286 malicious versions across 57 packages. The self-replicating worm targeted CI/CD pipelines, harvested credentials, poisoned additional packages, modified workflows, and planted backdoor configurations in AI coding assistant directories. It also explains that Chainguard customers were protected because Chainguard Libraries builds from source and blocked the malicious versions. ### Source excerpt A new npm supply chain worm compromised 57 packages and 286 versions. Learn how Chainguard blocked the attack and protected customers by design. ## Chainguard customers safe from Mini Shai-Hulud worm targeting @redhat-cloud-services npm packages with 100K+ weekly downloads DevFeed: [Chainguard customers safe from Mini Shai-Hulud worm targeting @redhat-cloud-services npm packages with 100K+ weekly downloads]() Original publisher: [Read original article]() Published: 2026-06-01T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [npm](), [Security](), [GitHub Actions](), [npm packages](), [GitHub](), [obfuscation](), [payload](), [OpenID connect (OIDC)]() Tags: [chainguard-actions](), [chainguard-libraries](), [endpoint-security](), [github](), [github-actions](), [malware](), [mini-shai-hulud](), [npm](), [obfuscation](), [oidc](), [packages](), [payload](), [red-hat](), [redhat-cloud-services](), [security](), [shai-hulud](), [tokens]() ### AI overview The article reports that the Mini Shai-Hulud worm compromised more than 90 @redhat-cloud-services npm packages through a hijacked GitHub account and GitHub Actions OIDC trusted publishing. The worm spreads tampered packages and malicious workflows, executes an obfuscated payload during installation, and steals cloud, Vault, GitHub, npm, and CI credentials. Chainguard customers using Chainguard Libraries for JavaScript and Chainguard Actions were unaffected. ### Source excerpt A new npm worm hit 90+ Red Hat packages. Chainguard customers stayed protected by blocking install-time scripts and hardening CI/CD workflows. ## Luck isn't a security control: What happened with mini Shai-Hulud and what you need to do DevFeed: [Luck isn't a security control: What happened with mini Shai-Hulud and what you need to do]() Original publisher: [Read original article]() Published: 2026-05-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [Malware](), [Open Source](), [GitHub Actions](), [npm](), [CI/CD](), [GitHub](), [AI-assisted coding](), [vulnerability]() Tags: [ai-coding-agents](), [chainguard-containers](), [chainguard-libraries](), [ci-cd](), [dependencies](), [github](), [github-actions](), [mini-shai-hulud](), [npm](), [packages](), [provenance](), [python](), [security](), [shai-hulud](), [software-supply-chain-security](), [supply-chain](), [worm]() ### AI overview This article examines the mini Shai-Hulud supply chain worm, which affected more than 400 packages. It argues that malicious code can enter during package build and distribution without a CVE, and that teams should strengthen preventive security across registries, GitHub Actions, CI/CD pipelines, dependencies, AI coding agents, and configuration files. ### Source excerpt A new supply chain worm hit 400+ packages. Learn why preventive security, not reactive patching, is the only way to stop the next attack. ## Custom tags available in beta on Vercel Sandbox DevFeed: [Custom tags available in beta on Vercel Sandbox]() Original publisher: [Read original article]() Author: Andy Waller Published: 2026-04-30T04:00:00Z Content type: release Language: en Sources: [Vercel News]() Topics: [Vercel](), [SDKs](), [Command-line interface](), [Code]() Tags: [agent](), [agents](), [billing](), [cli](), [code-generation](), [cost](), [customer](), [dashboards](), [packages](), [routing](), [sandbox](), [sdk](), [vercel]() ### AI overview Vercel Sandbox custom tags are available in beta, allowing teams to organize, filter, and manage sandboxes at scale. Each sandbox supports up to five tags, which can be updated as environments, ownership, or cleanup status changes. The feature supports use cases such as AI agent workflows, multi-tenant platforms, team-level visibility, billing attribution, and capacity planning, and requires the beta SDK and CLI packages. ### Source excerpt As teams scale isolated environments for AI agents, code generation, or dev workflows, keeping track of which sandbox belongs to whom, and why, becomes critical. Custom tags allow you to organize, filter, and manage Vercel Sandboxes at scale. Each sandbox supports up to five tags. Organize by environment, team, or customer Tags are flexible by design. Use them to separate staging from production, attribute usage to specific teams, or isolate sandboxes per customer in multi-tenant platforms: Update tags as context changes Promote a sandbox from staging to production, reassign ownership, or mark it for cleanup without recreating it: Easily track your sandboxes Filter sandboxes by any tag to quickly surface the ones that matter. This is useful for dashboards, cleanup scripts, or routing logic that needs to find all sandboxes matching a specific environment or team: Use Cases AI agents at scale: Tag sandboxes by session, user, or agent run to track which execution environment belongs to which workflow. Multi-tenant platforms: Isolate and filter sandboxes per customer or workspace, making billing attribution and cleanup straightforward. Team-level visibility: Attribute sandbox usage to specific teams for cost tracking or capacity planning. This feature is in beta and requires upgrading to the beta SDK and CLI packages. Learn more in the documentation. Read more ## Building Durable Order-Processing Workflows with Temporal and Encore DevFeed: [Building Durable Order-Processing Workflows with Temporal and Encore]() Original publisher: [Read original article]() Author: Ivan Cernja Published: 2026-04-29T00:00:00Z Content type: tutorial Language: en Sources: [Encore Updates]() Topics: [Tutorial](), [Development](), [Back end](), [API](), [V8](), [Database](), [Terminal]() Tags: [api](), [backend](), [cloud](), [code](), [database](), [development](), [http](), [packages](), [terminal](), [tutorial](), [v8]() ### AI overview This tutorial builds an order-processing backend with Temporal and Encore. It demonstrates durable workflow execution across inventory checks, payment, shipping, and confirmation, including retries, crash recovery, and compensation when a step fails. ### Source excerpt Durable workflows with automatic infrastructure ## Chainguard customers safe from new npm worm and xinference supply chain attack DevFeed: [Chainguard customers safe from new npm worm and xinference supply chain attack]() Original publisher: [Read original article]() Published: 2026-04-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Malware](), [npm](), [Credential theft](), [Library](), [chainguard libraries](), [chainguard containers](), [GitHub]() Tags: [chainguard](), [chainguard-containers](), [chainguard-libraries](), [chainguard-malware](), [credential-theft](), [github](), [malicious-packages](), [malware](), [npm](), [npm-malware](), [npm-worm](), [packages](), [pypi-malware](), [supply-chain](), [worm](), [xinference]() ### AI overview The article reports npm and PyPI malware attacks affecting 25 packages with more than 60,000 combined monthly downloads. It explains that Chainguard customers were protected because Chainguard builds from verifiable source code and rejects packages that rely on install-time scripts. ### Source excerpt New npm and PyPI malware hit many popular packages. Chainguard customers stayed protected by blocking install scripts and rebuilding only verified source code. ## Chainguard Libraries is now free until June 30, 2026 -- no commitment required DevFeed: [Chainguard Libraries is now free until June 30, 2026 -- no commitment required]() Original publisher: [Read original article]() Published: 2026-04-09T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [open-source-security](), [Security](), [Malware](), [Java](), [JavaScript](), [Python]() Tags: [2026](), [article](), [attacks](), [axios](), [chainguard-console](), [chainguard-libraries](), [chainguard-repository](), [code](), [dependency](), [free](), [install](), [java](), [javascript](), [libraries](), [library](), [litellm](), [malicious-packages](), [malware](), [open-source](), [open-source-packages](), [open-source-security](), [packages](), [rebuilds](), [software-supply-chain-security](), [telnyx](), [trivy-attack]() ### AI overview Chainguard Libraries is free for Chainguard console users until June 30, 2026, with no paid commitment required. It rebuilds Python, Java, and JavaScript packages from verified source in isolated environments and excludes libraries that use install-time scripts, helping reduce malware and software supply-chain risk. ### Source excerpt Open source attacks are rising. Chainguard Libraries rebuilds packages from verified source to block malware--now free until June 30, 2026. ## Cellular Network Infrastructure - Binary package feeds updated for Ubuntu 26.04 DevFeed: [Cellular Network Infrastructure - Binary package feeds updated for Ubuntu 26.04]() Original publisher: [Read original article]() Author: osmith Published: 2026-03-30T11:22:31Z Content type: release Language: en Sources: [Open Source Mobile Communications: News]() Topics: [Ubuntu](), [Network]() Tags: [bug](), [infrastructure](), [issue](), [lts](), [network](), [os](), [packages](), [release](), [tracker](), [ubuntu-26-04](), [updated]() ### AI overview The Osmocom project has updated its binary package feeds to provide latest and nightly feeds for the upcoming Ubuntu 26.04 LTS release. Feeds for Ubuntu 25.04 and Ubuntu 22.04 LTS were removed. ### Source excerpt The Osmocom project is now offering latest and nightly binary package feeds for the upcoming Ubuntu 26.04 LTS release. Feeds for Ubuntu 25.04 and 22.04 LTS have been removed. See Binary Packages for more information. ## Vercel Sandboxes now allow unique, customizable names DevFeed: [Vercel Sandboxes now allow unique, customizable names]() Original publisher: [Read original article]() Author: Harpreet Arora Published: 2026-03-26T07:00:00Z Content type: release Language: en Sources: [Vercel News]() Topics: [Vercel](), [Command-line interface](), [SDKs](), [configuration](), [Persistence]() Tags: [cli](), [configuration](), [documentation](), [packages](), [persistence](), [sandboxes](), [sdk](), [vercel]() ### AI overview Vercel Sandboxes created with the latest beta package now receive unique, customizable names within a project instead of ID-based identifiers. The beta SDK and CLI support named sandboxes, with CLI features for configuration management and session inspection. Named sandboxes also identify automatic persistence across session creation and resumption. ### Source excerpt Vercel Sandboxes created with the latest beta package will now have a unique, customizable name within your project, replacing the previous ID-based identification. Names make sandboxes easy to find and reference: The beta CLI adds configuration management and session inspection: Named sandboxes are the mechanism for identifying automatic persistence, which allows your session to be more easily identified for at both time of creation resumption. Install the beta packages to try named sandboxes today: pnpm install @vercel/sandbox@beta for the SDK, and pnpm install -g sandbox@beta for the CLI. Learn more in the documentation. Read more ## Introducing Chainguard Repository: A unified experience for secure-by-default open source artifacts DevFeed: [Introducing Chainguard Repository: A unified experience for secure-by-default open source artifacts]() Original publisher: [Read original article]() Published: 2026-03-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard repository](), [chainguard](), [Open Source](), [Security](), [Containers]() Tags: [agent-skills](), [ai-agents](), [chainguard](), [chainguard-repo](), [chainguard-repository](), [ci-cd-workflows](), [container-images](), [containers](), [libraries](), [open-source](), [open-source-artifacts](), [packages](), [policy](), [secure-by-default](), [virtual-machine-images]() ### AI overview Chainguard introduces Chainguard Repository, a unified experience for consuming secure-by-default open source artifacts with configurable policy enforcement. It brings together container images, libraries, OS packages, agent skills, CI/CD workflows, and virtual machine images through Chainguard-managed endpoints and provides compliance controls, security improvements through source rebuilds, and visibility dashboards. ### Source excerpt Chainguard Repository is a single, Chainguard-managed experience for pulling secure-by-default artifacts with built-in, configurable policy enforcement. [Next page]()