
Security News
Feross on TBPN: Socket's Series C and the State of Software Supply Chain Security
Feross Aboukhadijeh joins TBPN to discuss Socket's $60M Series C, 500%+ ARR growth, AI's impact on open source, and the rise in supply chain attacks.
github.com/surajssd/dotfiles
Advanced tools
Personal shell configurations, custom utility scripts, and installation automation. Uses a symlink-based approach so that git pull immediately updates active configs and scripts.
cd ~/code
git clone https://github.com/surajssd/dotfiles
cd dotfiles
make clone-private # optional: clone private dotfiles submodule
make install-all
# Install everything (configs, scripts, and skills)
make install-all
# Install only scripts to ~/.local/bin
make install-local-bin
# Install only config files (shell, git, gpg, starship, tmux, etc.)
make install-configs
# Install only Claude Code skills to ~/.claude/skills
make install-skills
# Pull latest from both public and private repos
make pull-master
# Pull latest and reinstall everything
make update
If you don't have make installed:
./installers/install-all.sh
configs/ — Shell configs (bashrc/zshrc), git, gpg, starship, tmux, terraform, k9slocal-bin/ — Custom utility scripts (symlinked to ~/.local/bin)skills/ — Claude Code skills (symlinked to ~/.claude/skills/)installers/ — Installation automation scriptsdotfilesprivate/ — Git submodule for private/sensitive configs and scriptsAll installers create symlinks (not copies), so changes in this repo are immediately reflected in the home directory.
local-bin/ to ~/.local/bin/skills/ to ~/.claude/skills/FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Feross Aboukhadijeh joins TBPN to discuss Socket's $60M Series C, 500%+ ARR growth, AI's impact on open source, and the rise in supply chain attacks.

Security News
OSV withdrew 157 OSV malware reports after automated false positives incorrectly flagged trusted npm and PyPI packages, sending bad records into tools that rely on OSV data.

Research
/Security News
TrapDoor crypto stealer hits 36 malicious packages across npm, PyPI, and Crates.io, targeting crypto, DeFi, AI, and security developers.