
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
YTPA - Play All For YouTube
ytpa-play-all-for-youtube
YTPA, the popular userscript, now comes directly to your browser as extension! Adds the "Play All" button back to YouTube and improves it with random play and popular play. Even works on Shorts and Streams!
YTPA is the feature rich and leading userscript for accessing hidden playlists from the channel page, now available as extension.
It is actively maintained and has various improvements:
FAQs
YTPA, the popular userscript, now comes directly to your browser as extension! Adds the "Play All" button back to YouTube and improves it with random play and popular play. Even works on Shorts and Streams!

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.