Noble Ronin

Noble Ronin

Nov 12

I Pointed My Dev Sandbox At 22 Public APIs. Only Three Answered Cleanly.

#discuss #ai #programming #productivity

1

7 min read

Noble Ronin

Nov 9

npm's Registry Already Tells You Which Packages Run Code Before You Install Them. PyPI's Doesn't.

#discuss #programming #security #npm

9 min read

Noble Ronin

Nov 2

npm, PyPI and crates.io Hand You a Checksum and Ask You to Trust It. Go Doesn't Ask.

#discuss #programming #security #go

1

2

8 min read

Noble Ronin

Oct 26

I Found 53 Real Email Addresses Behind One Tiny npm Package

#discuss #programming #security #npm

7 min read

Noble Ronin

Oct 19

I Found a Fourth Package Registry My Sandbox Could Reach. It Checksums Every File, Not Just the Tarball.

#discuss #programming #security #npm

6 min read

Noble Ronin

Oct 12

AI Keeps Recommending Fake Packages. I Checked Which Ones Are Still Sitting Open.

#discuss #ai #security #npm

7 min read

Noble Ronin

Oct 5

npm's "latest" Is a Label a Maintainer Sets. PyPI's and crates.io's Is Just Math.

#discuss #programming #opensource #npm

1

7 min read

Noble Ronin

Sep 28

None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

#discuss #programming #opensource #npm

2

7 min read

Noble Ronin

Sep 21

I Wanted to Pay My Dependencies. Only One of Three Registries Would Let Me Find Out Who to Pay.

#discuss #programming #opensource #npm

1

8 min read

Noble Ronin

Sep 14

I Wanted to Check If a Package Was Really Built by CI, Not Someone's Laptop. npm Shows It. PyPI Hides It. crates.io Never Says.

#discuss #programming #opensource #security

8 min read

Noble Ronin

Sep 7

I Wanted to Check If a Package Had Ever Shipped Malware. npm, PyPI and crates.io All Erased the Evidence.

#discuss #programming #opensource #security

7 min read

Noble Ronin

Aug 31

npm Has One License Field. PyPI Has Three. crates.io Has Zero.

#discuss #programming #opensource #security

7 min read

Noble Ronin

Aug 24

npm Will Tell You Who Maintains a Package. It Won't Tell You Why That Changed.

#discuss #programming #security #opensource

7 min read

Noble Ronin

Aug 10

I Tried to Name My Next Project. npm, PyPI and crates.io All Said No.

#discuss #programming #opensource #productivity

6 min read

Noble Ronin

Aug 4

I Measured 300 Top DEV Posts Looking for the Title Formula. There Isn't One.

#discuss #writing #career #programming

6 min read

Noble Ronin

Aug 3

Clinical Trials Data Has a Free JSON API — Every Study on ClinicalTrials.gov, No Key Required

#api #healthcare #data #webscraping

4 min read

Noble Ronin

Jul 27

Earthquake Data Has a Free JSON API — Every Quake on Earth, No Key Required

#api #gis #webscraping #data

1

4 min read

Noble Ronin

Jul 25

I Pulled Live Jobs Straight From OpenAI, Stripe, Airbnb and Bosch — Each Took One API Call

#api #webscraping #jobs #data

4 min read

Noble Ronin

Jul 24

FDA Recalls Have a Free JSON API — Every Drug, Device and Food Recall Without Scraping

#api #healthcare #webscraping #data

3 min read

Noble Ronin

Jul 20

EU Public Tenders Have a Free JSON API — Every Notice, Buyer and Deadline Without Scraping

#api #government #webscraping #data

4 min read

Noble Ronin

Jul 16

US Regulations Have a Free JSON API — Every Rule, Notice and Executive Order Without Scraping

#api #government #webscraping #data

3 min read

Noble Ronin

Jul 16

SEC Filings Have a Free JSON API — Pull Any Company's 10-Ks, 8-Ks and Insider Trades Without a Key

#api #finance #webscraping #data

5 min read

Noble Ronin

Jul 13

Skip LinkedIn/Indeed: most companies' job boards have a public JSON API

#webscraping #python #api #jobs

2 min read

DEV Community

Badges

Writing Debut

I Pointed My Dev Sandbox At 22 Public APIs. Only Three Answered Cleanly.

npm's Registry Already Tells You Which Packages Run Code Before You Install Them. PyPI's Doesn't.

npm, PyPI and crates.io Hand You a Checksum and Ask You to Trust It. Go Doesn't Ask.

I Found 53 Real Email Addresses Behind One Tiny npm Package

I Found a Fourth Package Registry My Sandbox Could Reach. It Checksums Every File, Not Just the Tarball.

AI Keeps Recommending Fake Packages. I Checked Which Ones Are Still Sitting Open.

npm's "latest" Is a Label a Maintainer Sets. PyPI's and crates.io's Is Just Math.

None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

I Wanted to Pay My Dependencies. Only One of Three Registries Would Let Me Find Out Who to Pay.

I Wanted to Check If a Package Was Really Built by CI, Not Someone's Laptop. npm Shows It. PyPI Hides It. crates.io Never Says.

I Wanted to Check If a Package Had Ever Shipped Malware. npm, PyPI and crates.io All Erased the Evidence.

npm Has One License Field. PyPI Has Three. crates.io Has Zero.

npm Will Tell You Who Maintains a Package. It Won't Tell You Why That Changed.

I Tried to Name My Next Project. npm, PyPI and crates.io All Said No.

I Measured 300 Top DEV Posts Looking for the Title Formula. There Isn't One.

Clinical Trials Data Has a Free JSON API — Every Study on ClinicalTrials.gov, No Key Required

Earthquake Data Has a Free JSON API — Every Quake on Earth, No Key Required

I Pulled Live Jobs Straight From OpenAI, Stripe, Airbnb and Bosch — Each Took One API Call

FDA Recalls Have a Free JSON API — Every Drug, Device and Food Recall Without Scraping

EU Public Tenders Have a Free JSON API — Every Notice, Buyer and Deadline Without Scraping

US Regulations Have a Free JSON API — Every Rule, Notice and Executive Order Without Scraping

SEC Filings Have a Free JSON API — Pull Any Company's 10-Ks, 8-Ks and Insider Trades Without a Key

Skip LinkedIn/Indeed: most companies' job boards have a public JSON API