Packages - Moozonian Search

github.com• Aug 20, 2026• 1 min read

Show HN: Icebug-format: immutable, interoperable graph standardMost graph analytics packages have a mutable graph implementation that uses a heap allocated vector to store the graph. It works for toy graphs. But if you're loading a billion edge graph using G.add_edge() it's going to take a while.We don't need to invent new standards. Such interoperable, immutable memory standards already exist: Apache Arrow and Compressed Sparse Rows (CSR). CSR is widely used in scipy, cugraph and columnar graph databases among others. Both on CPUs and GPUs.icebug-format combines both into a on-disk standard based on Apache Parquet and an in-memory format based on Apache Arrow.Bindings available in many popular languages including python, typescript and rust.The package ships with convenience scripts to convert flat tables such as vertex.parquet and edges.parquet to this format in RAM/disk constrained environments.Sample graphs: https://huggingface.co/datasets/ladybugdb/ldbc-csr/tree/mainConverted from: https://ldbcouncil.org/benchmarks/graphalytics/datasets/Large

github.com• Aug 20, 2026• 1 min read

Show HN: Kanna – Go generators for DI, queries, internationalization and moreI kept writing constructor wiring up, domain types and API types conversions, test fixtures, DB row scans, bra-bra-brah by my hands. I know that libraries those use reflections may help, but they fails on runtime and we cannot see what is happening without reading code. So I decided to create a project in oposite hand. Generate code and put it in our repository. The code is ordinary Go code, so that we can review, watch diffs and also debug it.For instance, when we have the following code,func NewDB() DB { return &DB{} }func NewUser(db DB) User { return User{db: db} }type Container struct { User User `di:""` }it generates...func NewContainer() *Container { db := NewDB() user := NewUser(db) return &Container{User: user} }No providers, just scan packages and find them.There are 5 generators.1. DI2. Struct to struct mapping (for protubf and so on)3. Test fixtures (from model to them)4. SQL queries (like an sqlc but without SQL and more like GORM)5. Type safe i18nAll we need is just a stru

github.com• Aug 19, 2026• 1 min read

Show HN: Pack AI and scientific models as self-contained boxesHi! I've been working on an open-source project called Scrollcase. I started this cause moving Python or ML projects between machines is often painful. You need the right Python version, libraries, native builds, model files, and so on. So instead of making someone rebuild a Python environment on their machine, Scrollcase packages everything once, including Python, locked dependencies, code, and model files.Then they can verify it, unpack it, and run it. No Python install, no pip install, no Docker, and no dependency to mantain. You just define what goes inside, lock the dependencies, and build a portable, self-contained, verifiable package that's ready to run.Would love feedback from people who had to package Python, ML, or scientific environments for machines they don't control.

sports.yahoo.com• Aug 18, 2026• 1 min read

Tuesday ‘Dawg Bites Hears Rumblings of DisrespectWelcome to Tuesday, Bulldog fans! We’re not in mid-season form yet, but we are in full pads and live hitting. There’s a few new wrinkles in the playbook we haven’t installed, but the vanilla packages are getting nailed down and ready for game action. You’ve seen the Coaches Preseason poll, which is like when the […]

npmjs.com• Aug 15, 2026• 1 min read

Show HN: Sandbox the install step of any NPM packageIt fetches the exact tarball npm install would, runs the declared install scripts in a sandbox (no network, all capabilities dropped, read-only filesystem), and returns a verdict signed under a published Ed25519 key, bound to the sha256 of the bytes. No account, it mints an anonymous rate-limit key on first call. Node and Python, 20 checks/hour.I built it to put a denominator under "npm install runs arbitrary code." Of 658 MCP-related packages, 20 declare an install script (3.0%). Running the twenty is where reading the manifest misled me: four were preinstall: npx only-allow pnpm, which I had filed as a benign guard, and all four make a network call at install because npx fetches only-allow from the registry. A manifest tells you what a script is; only running it tells you what it needs.Honest scope: dependencies are not installed, so this is a package's own declared install surface, not its transitive closure; and install-time is not the whole attack surface, a package can act at fir

github.com• Aug 12, 2026• 1 min read

Show HN: Kavkash – An Atuin inspired history engine built with stock Linux utilsI'm a long-time Atuin user. After seeing another alternative - stinkpot - posted recently, I wanted to take my shot at it too. Rather than re-implementing it in a fancy language, i wanted to see if it would be possible to build a functional one entirely on Linux utilities and system packages. LLMs did the heavy work, i did some small touches and kavkash is now pretty functional for my everyday use, replacing atuin.Kavkash supports bash, zsh and fish. It can import shell history files and atuin history upon installation. You can later re-import the files manually if needed.Performance is on par with atuin on my veteran t440p - well, a few milliseconds difference has no disapponting effects on my daily use at all :) -Kavkash can be run manually or via rc files or better via systemd --user service.You can also try Kavkash via docker, without needing to install it.All the necessary instructions are in the github repo.

news.ycombinator.com• Aug 11, 2026• 1 min read

Ask HN: Have you used LLMs to reinvigorate you niche programming community?I've seen a few discussions over the years about how niche languages like Lisp, Forth, Prolog, etc. would be great to use, but even for personal projects the lack of available packages makes them hard to use. However, with an LLM you can have it replicate whatever package you'd like from a more popular language. You can even port software to your favorite niche architecture. If you really want to run your homelab off a PA-RISC machine you just give an agent SSH access and tell it to make the software work.For myself, I have only done very little of this. I did add POWER vectorization to POV-Ray so that I can get a little more speed out of a machine that has more power than it needs for other things. Instead of letting it use something like Python or Go for small scripts I'll tell the LLM that the more logical choice is Prolog. But mostly I have been using mainstream languages because the code is being generated and, therefore, I'm not playing with it, so I'm interested in hearing if ot

bing.com• Aug 10, 2026• 1 min read

What Does AI Talent Look for in an Employer?The competition for AI talent remains strong—and expensive. How can companies possibly compete for skilled AI talent when Silicon Valley behemoths are offering salaries and signing packages impossible ...

github.com• Aug 9, 2026• 1 min read

Show HN: Sufleur - npm-style prompt registry with typed code-generationHi HN, I've built Sufleur, a prompt registry and companion CLI tool. The motivation was essentially the frustration that prompts are becoming more and more crucial parts of applications, but in the codebases I've seen, they just sit around as random strings, in-house templates with odd rules, and essentially no version control beyond git. I've felt pain in the past when prompts suddenly changed their schemas (either input for rendering or output expected by the LLM), having to read through the whole thing to figure out what I need to supply for the rendering to work, and spent hours trying to debug why the carefully written and evaluated prompt which worked wonders in a python notebook suddenly stopped working in a typescript codebase in prod...These are the main ideas:- Mustache templates for the prompts, since Mustache is a mature, logic-less templating language which already has packages in a lot of languages I would ever want to target.- Input schemas to render a prompt properly ar

spryly.io• Jul 31, 2026• 1 min read

Show HN: Spryly – Track outdated dependencies across every repo and registryI am a solo developer who maintains many projects across stacks, and keeping track of what packages are out of date is a chore I loathe. Having to check each repository separately is an arduous task for me, not to mention keeping all my CMS installs and plugins up to date as well. Things tend to drift on older projects without me noticing. So I built Spryly. First as a personal tool, but I liked it so much I decided to release it. You can connect your GitHub/GitLab accounts, select the repos you want to track, and Spryly scans the manifests to find your package dependencies and compares each one to its registry, showing you what’s out of date. All of your projects and packages at a glance in one dashboard. It reads your manifests and never opens PRs or modifies anything in your repositories. If you want automated version bumps, Dependabot and Renovate already handle that. Spryly is solving a different problem - seeing what's out of date across everything at once, including the projects

marketplace.visualstudio.com• Jul 30, 2026• 1 min read

Show HN: A VS Code extension buffers NPM updates to avoid supply chain attacksI had been using package.json version keepers for quite some time but after the big supply chain attack i thought they would be the perfect place to add in some security.The idea is just to provide the latest package number x days old. This will help prevent most of the danger in supply in chain attacks.It will also remove the `^` if you have it so you can better control what version of a package your application is using.To be more security focused it gives general hints in the hover menu to help keep an eye on the packages you have installed. These hints include warnings for staleness, high dependency count, and number of downloads.Since all of this is something you can get through the npm api, I called it tinyNpm

bing.com• Jul 30, 2026• 1 min read

Latest Arch Linux newsThe Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. More than 400 packages in the Arch User ...

news.ycombinator.com• Jul 25, 2026• 1 min read

Show HN: Cross-Platform Flutter and React-Native Plugin – FFmpeg-Kit-ExtendedFull featured React-Native and Flutter plugin that lets you execute FFmpeg, FFprobe and FFplay commands without needing to deploy those executables. Get the full power of FFmpeg at native performance level. Includes support for 100+ external libraries with pre-bundled preset distributions for 24 different binaries distributed per platform with various included features plus the ability to deploy custom builds.https://github.com/akashskypatel/ffmpeg-kit-extendedhttps://www.npmjs.com/package/ffmpeg-kit-extendedhttps://pub.dev/packages/ffmpegkitextended_flutterCore features:- Cross-Platform Support: Works on Android, iOS, macOS, tvOS, Linux and Windows.-- Android: Full video playback support with native surface rendering.--- x86: x86 architecture is not supported due to its legacy status.-- iOS & macOS: High-performance video playback with CVPixelBuffer and Metal integration.-- iOS: Supports both physical devices and simulators. x86_64 architecture is not supported due to its legacy statu

github.com• Jul 22, 2026• 1 min read

Show HN: Readmer is a compiler for building READMEs from Liquid/Jinja2 templatesAs a somewhat prolific open-source author over the past 25 years, I maintain hundreds of Rust crates, Ruby gems, Python packages, and so on. One of the painful aspects of large projects consisting of dozens of packages has been the individual READMEs for each package, with lots of repetitive elements but also a great deal of necessary package-specific variation.Now, before anyone asks, I don't want to just have an LLM generate my READMEs. People are increasingly sensitive to AI slop, and that certainly starts with a project's README: slop is readily recognizable through LLMs' lack of good judgment on README contents. More isn't always better: "If I had more time, I would have written a shorter letter" and all that.I believe that at this point given widespread, complex formatting of READMEs, what with CI badges, headers, footers, tables, images, inline HTML, etc, etc, we've in any case realistically drifted quite far from the original human-readable vision of Markdown as such. Perhaps,

codifycli.com• Jul 22, 2026• 1 min read

Show HN: Codify – Terraform for Developer EnvironmentsSetting up developer environments is surprisingly manual. Most teams rely on a mix of docs, shell scripts, and tribal knowledge. We built Codify to make the process reproducible with a Terraform-like workflow.The project consists of an open-source CLI, a JSON5 based configuration language, a library of 50+ resources, a web/desktop editor, and an AI assistant. The workflow mirrors Terraform: plan + apply to make changes, and import + refresh to synchronize an existing configuration with the current system. Codify manages both installation and configuration, supporting tools like Git, SSH keys, VS Code, WebStorm, Python, JavaScript, Docker, cloning git repositories and even managing macOS system settings.Compared to existing tools like Nix, our goal is to make Codify more approachable. We chose JSON5 instead of a dedicated DSL to reduce the learning curve, and Codify installs and configures packages the same way a human would, allowing it to coexist with existing installations. The trade

github.com• Jul 17, 2026• 1 min read

Show HN: Tiny and CSP-safe expression language for JavaScriptFor a feature on project I was working on, I needed a simple way to have some business logic like "expressions" evaluated at runtime. I only found a handfull packages either very old (e.g. expr-eval) or very Math oriented (e.g. Mathjs).I wanted a way to have a very simple core "compile then evaluate" package that I could easily extend with custom functions needed for the project (so in theory I could support a full Math suite).The result is this tiny `xprsn` package, and is somewhere around 1.2kb gzipped, extracted from the closed-source project. See https://github.com/robinvdvleuten/xprsn.Not gonna lie here, as it is mostly Fable5 effort (you probably will notice by the terse, not very human-readable precedence climbing parser. But the point was to get a tiny working package, not some heavy brain exercise of myself :)Despite some anti AI-slop people on HN, I wanted to share it here as I still think it would be useful to others.

github.com• Jul 16, 2026• 1 min read

Show HN: uplpgsql – PL/pgSQL compiled to native codeuplpgsql compiles PL/pgSQL to native code. It took over twenty years to get here, but here it is.On July 19, 2005, I demoed my optimizing PL/SQL compiler to Andy Astor, Denis Lussier, and Jim Mlodgenski at EnterpriseDB; PL/SQL packages, procedures, and functions ran on Postgres at native speed, not interpreted. While they didn't acquire it, they brought me on as a founding engineer focused on Oracle Database compatibility and performance.Then, on November 20, 2014, long after we'd both left, Denis suggested I make it a universal PL compiler that didn't care which dialect it was handed, with front-ends for PL/pgSQL, PL/SQL, SQL/PSM, and T-SQL. "Build it on top of your compiler," he said, "and call it the Universal Procedural Language." I did, but I kept it closed.uplpgsql is the modern PL/pgSQL version of that compiler, built using AI-assisted analysis and reconstruction of my prior work, now JIT-based and Apache licensed.Why? Because normal PL/pgSQL is a tree-walking interpreter: every

bing.com• Jul 16, 2026• 1 min read

Does YouTube TV have local channels?See which YouTube TV packages include local channels, and how much you have to pay for access here. Picking a live TV streaming service after you decide to move on from cable can involve a lot of ...