Lio李歐 lionello

Configuring minimum release age across npm, pnpm, and yarn

Setting a minimum release age (a "cooldown") on dependencies is a cheap, high-leverage defense against supply-chain attacks. Most malicious package versions are detected and yanked within hours, so a 24-hour delay filters out the smash-and-grab incidents (axios 1.14.1, ua-parser-js, Solana web3.js, etc.).

All three major Node.js package managers now support this, but each one used a different name and a different unit. Here is what you need.

Minimum versions

Tool	Setting	Unit	Introduced in

TL;DR
Zsh initializations
- Zsh way of $PATH
- the special macOS
/usr/libexec/path_helper

The .*shrc file

Installing K3s with the external ("out-of-tree") AWS Cloud Provider

Pre-requisites

Refer to the upstream project's official documentation for the various pre-requisites. You must have an IAM role with the right permissions attached to your K3s instances, and you must also tag your nodes with a clusterid. Refer to the Rancher documentation for how to do this

Install K3s with the following options:

curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server \

	{
	"permissions": {
	"allow": [
	"Bash(aws * describe-*)",
	"Bash(aws * get-*)",
	"Bash(aws * list-*)",
	"Bash(aws pricing:*)",
	"Bash(az * list:*)",
	"Bash(az * show:*)",
	"Bash(az monitor diagnostic-settings list:*)",

	"""
	The most atomic way to train and run inference for a GPT in pure, dependency-free Python.
	This file is the complete algorithm.
	Everything else is just efficiency.

	@karpathy
	"""

	import os # os.path.exists
	import math # math.log, math.exp

	{
	"registry-mirrors" : [
	"https://cr.yandex/mirror",
	"https://dockerhub.timeweb.cloud",
	"https://huecker.io",
	"https://noohub.ru",
	"https://dcr-px.ru",
	"https://mirror.gcr.io",
	"https://quay.io",
	"https://registry.access.redhat.com",

	{
	"$schema": "http://json-schema.org/draft-04/schema#",
	"properties": {
	"node": {
	"properties": {
	"id": {
	"type": "string",
	"description": "An opaque node identifier for the Envoy node. This also provides the local\n service node name. It should be set if any of the following features are\n used: :ref:`statsd <arch_overview_statistics>`, :ref:`CDS\n <config_cluster_manager_cds>`, and :ref:`HTTP tracing\n <arch_overview_tracing>`, either in this message or via\n :option:`--service-node`."
	},
	"cluster": {

	@MainActor
	final class AutocompleteObject: ObservableObject {

	let delay: TimeInterval = 0.3

	@Published var suggestions: [String] = []

	init() {
	}

	FROM --platform=${BUILDPLATFORM:-linux/amd64} golang:1.16 as builder

	ARG TARGETPLATFORM
	ARG BUILDPLATFORM
	ARG TARGETOS
	ARG TARGETARCH

	WORKDIR /app/
	ADD . .
	RUN CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} go build -ldflags="-w -s" -o yourapplication main.go

	#!/bin/sh

	# Required on macOS because cctools is marked as broken
	export NIXPKGS_ALLOW_BROKEN=1
	nix run -f image.nix -c push
	docker run ghcr.io/piperswe/hello