jdx

I make open source dev tools at like mise, aube, fnox, hk, mbx, pitchfork. Previously I wrote the heroku cli and oclif. ex-amazon/meta.

[jdx @jdxcode]

@beatmastermatt new orleans is less than 1m?

[jdx @jdxcode]

@nateberkopec we don't have spinel itself yet though

[jdx @jdxcode]

@nateberkopec lol https://t.co/vYPAG5aLc4

[jdx @jdxcode]

@0xSheetal neither, the pin should be part of the install instructions, e.g.: packslip install jdx/mise --pin ps1_nlhmwtfeufglxv5myvwvronk7a

of course that does mean the initial pin needs to be sent over TLS but unlike a checksum this works for future releases without changing the pin

[jdx @jdxcode]

This week’s eMudhra CA compromise is a reminder: if your release binaries are only protected by TLS (e.g.: `curl | sh`), anyone with a forged cert can swap them.

I am working to get the packslip cli into Linux distros for bootstrapping package managers. Spread the word, if this gets popular enough we'll all eventually be able to stop using `curl | sh` for anything.

mise also understands packslip and in addition to hardened supply chains, users can also get agent skills and completions tied to tool versions.

https://t.co/OL1N8dxSCn

[jdx @jdxcode]

@DarkSmith if the tool you're installing has a packslip manifest then yes

[jdx @jdxcode]

@mattespapier clearly this calls for bypassing min age

[jdx @jdxcode]

mise 2026.10.17 should be out in an hour. Update immediately as it contains new bundled root certs.

[jdx @jdxcode]

@HSVSphere @0xMassi @mitsuhiko if i switched to system certs i would get endless bug reports, bundling is the better way to do it

[jdx @jdxcode]

@Capyvara @scrollingentity do my precompiled binaries not work with those?

[jdx @jdxcode]

https://t.co/nlHC7w9m9f

[jdx @jdxcode]

@TheAlexLichter @kurtextrem especially true when you have agents running since you're probably never going to see the warnings unless the agent happens to mention them

[jdx @jdxcode]

@scrollingentity i'm surprised people are still compiling ruby

[jdx @jdxcode]

@cremieuxrecueil finally good news about being 40

[jdx @jdxcode]

@ryanrhughes 4.1 wen

[jdx @jdxcode]

it's coming to more pages soon but you can play with it here: https://t.co/ta9X1GmPED

[jdx @jdxcode]

coming soon to the mise docs

[jdx @jdxcode]

@just_be_dev @Marc_van_Sax icymi i improved the integration of fnox/mise: https://t.co/tpRKobDwSc