"It works on my computer." Troubleshooting the executable of the latest application on an end users computer (be they co-worker, team lead, or high-level stakeholder) may be over with Microsoft's …

I’m probably not the only one guilty of a Pull and Pray. You know, when you clone your application using git, install the dependencies with pip, and pray it all …

NuGet.org is the best place to get NuGet packages and jump-start your projects, but how can you quickly vet content when time is tight? Developers are always on the lookout …

PyPI admins try their best to identify and remove malicious Python packages, but many inevitably slip through. Python package aws-login0tool was recently discovered to be a malicious package attempting to …

Did you hear about the malicious PyPI package that collects environment details and sends the info to an unknown webservice? Or the Trojan horse one that installs, fetches a exe …

Have you ever consulted the source code of an NuGet package for debugging? Checking the original source files used to build a package can help during the debugging process, especially …

Choosing how to migrate a .NET Framework library to .NET 6 (or the future .NET 7, .NET 8, etc.) depends on each application. Or maybe you don't even need to …

Did you know approximately 13.6% of packages on PyPI have a GPL-3 license? That means there are over 45,000 packages operating under a Copyleft practice – which when violated can …

Versioning Python packages is tricky due to its range of complex versioning schemes, but that doesn't mean you can just choose any old versioning scheme and call it a day …

For NuGet packages, a vulnerability isn’t the end of the world. Most NuGet users can agree that even a critical vulnerability is difficult to exploit. That doesn’t change the fact …