Does YouTube TV have local channels?See which YouTube TV packages include local channels, and how much you have to pay for access here. Picking a live TV streaming service after you decide to move on from cable can involve a lot of ...
Show HN: Arcaide – Explore code with multi-level call graphsOne of the things I do when approaching a new codebase is to find the entry points and start exploring down the call paths. This gives a good overview of the different components in the code and how they're connected. I wanted to translate that to a visual experience, similar to how you would use call graphs, but there's a couple of problems with classical call graphs. One, call graphs represent flow at the function level, so the architectural context is lost. And call graphs tend to get very large and can grow exponentially with program size.The approach I'm exploring is to construct "multi-level" call graphs. These are call graphs represented in the form of program structure showing control flow not just at the function level, but rolled up to higher level units such as classes and packages. This gives you the ability to zoom in and out and see your code at different levels of abstraction, à la C4 diagrams, allowing you to navigate large graphs by expanding the areas you care about a
Show HN: Android Developer Verification Package blacklisted in Aurora StoreSo, I have a Lenovo Idea Tab (11") tablet where I don't use a Google account, and several Google apps are disabled including the Play Store. I use Aurora Store and F-Droid to install and update packages. Only time I enable Play Store is to install an update to Play Services because Aurora Store can't (conflicting packages, meaning the signing key of the Play Services package has changed). I keep it disabled because it ignores the 'Don't Auto-update Packages' setting and updates Google apps packages without permission (and sometimes re-enables them)...What does show up as an update in Aurora? The Android Developer Verification package. Of course I immediately blacklisted it. Possible avenue to not install it?Don't know if this will really stop it but it will be an interesting experiment. Will let you know in the near future.Discuss.
Show HN: envapt, typed env config for decoupled TS codebases (Node to edge)Hi HN. I'm Dhruv and I've been working on envapt for about a year now and I've FINALLY completed the roadmap I scope creeped and QA'd over the past few months. It reads environment config in TypeScript and returns the typed value instead of string | undefined, from whatever source you bind. It runs on Node, Bun, Deno, Cloudflare Workers, the browser, and well, anywhere.Most typed-env libraries have you declare every variable in one central schema and read the result from one object. That works well for a single application. Mostly. That didn't work for me because in a framework or a monorepo, decoupled packages each read their own config values, and sharing one config object across every package just doesn't make sense to me, plus some other nits.envapt does the opposite. You bind a source once at startup, and on Node/Deno/Bun it binds your .env files and process.env for you, with cascading profiles per environment. After that, ANY typed read in ANY file uses that source, and each valu
Show HN: Windows Auto Profiles – WinGet wrapper that adds app profilesWindowsAutoProfiles (WAP) is a PowerShell wrapper around WinGet that organizes packages into versioned Windows app profiles. Profiles can also include explicit captures for applications installed outside WinGet and for custom user configuration discovered in Windows Sandbox.
Show HN: BetterDB, MIT Valkey-native context layer for AI agentsToday we released an open, Valkey-native context layer for AI agents as part of our packages at BetterDB (agent memory, semantic + multi-tier caching, typed retrieval) that run on a Valkey instance no matter where it is - no vendor lock-in. We even started provisioning Valkey instances starting today. Packages are shipped on npm and PyPi.Why we made it: BetterDB originally started as a monitoring and observability platform for Valkey, Redis and any RESP compatible db. This is still the core of the product, but in the process of building this, we kept seeing that one of the fastest-growing uses of Valkey was AI - vector store and cache behind agents and RAG. So about a month and half ago we published MIT semantic and agent cache libraries for that, with the agent cache library not even requiring any modules and being able to run on vanilla Valkey. Today we are extending this to agent memory. Because we started with observability, it also runs everywhere - every cache, memory and retriev
Show HN: Khala – let your AI sessions talk to each other, across any LLMI got tired of babysitting context between my own AI sessions and having to copy-paste summaries or update MD files across sessions for different purposes, so I built this.Every AI session starts with a blank slate. Whatever you built up in the last session, like architecture decisions, debugging history, the reasoning behind every choice, is all gone. So youu re-explain from scratch.Khala fixes the handoff at the source. Instead of writing a summary file, the sending session packages its full context and delivers it directly to a named inbox. The receiving session picks up exactly where the sender left off. Works across any MCP-compatible tool (Claude, Cursor, Codex, ChatGPT, etc.).Demo: https://youtube.com/shorts/i8xgbrY_Y0gInvite-only for now, drop a comment if you want to try it free this month and I'll send you a code.
Show HN: Give This Markdown to Your Coding Agent Before Publishing to NPMhttps://npm-supply-chain-attack-techniques.pagey.site/attack...Website: https://npm-supply-chain-attack-techniques.pagey.siteThis covers all techniques used in past 1 year to conduct various attacks on npm packages. Use it to get your project reviewed thoroughly before publishing.Exploits covered with mitigation information:1. Maintainer Account Takeover and Malicious Publish2. Lifecycle Hook Execution3. Self-Replicating npm Worms4. CI/CD Identity Plane Attacks5. Git-Based Dependency Smuggling6. Remote Dynamic Dependencies7. Phishing Infrastructure Hosted Through npm and Package CDNs8. Credential and Secret Harvesting9. Exfiltration and Dead-Drop Channels10. Persistence and Anti-Forensics11. Obfuscation and Payload Packaging12. Package Naming and Discovery Abuse
Save up to 67% on Disney+ bundle deals for National Streaming DayStreaming service bundles are gaining popularity as a way to cut down on monthly subscription costs. National Streaming Day on May 20 offers limited-time discounts on various streaming packages.
Free Instagram Followers’ Trial — Top Site to Buy FollowersLooking to grow your Instagram presence without upfront risk? Socialboom.io offers a weekly free trial of 10 Instagram followers per profile, plus optional paid packages for larger growth when you’re ...
Show HN: Mljar Studio – local AI data analyst that saves analysis as notebooksHi HN,I’ve been working on mljar-supervised (open-source AutoML for tabular data) for a few years. Recently I built a desktop app around it called MLJAR Studio.The idea is simple: you talk to your data in natural language, the AI generates Python code, executes it locally, and the whole conversation becomes a reproducible notebook (*.ipynb file). So instead of just chatting with data, you end up with something you can inspect, modify, and rerun.What MLJAR Studio does:- Sets up a local Python environment automatically, runs on Mac, Windows, and Linux- Installs missing packages during the conversation- Built-in AutoML for tabular data (classification, regression, multiclass)- Works with standard Python libraries (pandas, matplotlib, etc.)- Works with any data file: CSV, Excel, Stata, Parquet ...- Connects to PostgreSQL, MySQL, SQL Server, Snowflake, Databricks, and Supabase.For AI: use Ollama locally (zero data egress), bring your own OpenAI key, or use MLJAR AI add-on.I built this becau
Ask HN: Package RegistryI've been migrating off-of GitHub and noticed that codeberg does not allow you to set visibility on packages per-repository or even per-package.If your org is public, then so are all packages you publish. If you set this org to private, you cannot have any public projects.I could technically create two orgs, but I would prefer keeping everything under one.This leaves me with the following options:- host my own registry (registry:2 or harbor seem popular, but I am afraid of the traffic it might bring. I could throw it under tailscale, though.)- Keep these pacakges on the GHCR registry, although that doesn't seem like a good long-term solutionWhat's you guys' experience with this? I don't mind self-hosting things, but setting these up seems like a big chore. I already have forgejo runners, because this was easy to set-up in docker+dind (yes, this isnt very secure, but the box its running on has nothing sensitive).
Show HN: Headroom – Get 2x Claude Code usage by optimizing input dataHi HN!Frustrated with Claude Code usage limits I stumbled upon the awesome Headroom project by Tejas Chopra. After jumping through the hoops to install it, I realized the majority of devs don't necessarily use python and aren't comfortable just installing pip packages so I set out to create a Mac App wrapper with Tejas blessing. Here it is!What Headroom does: It sits between your editor and Claude, compressing what gets sent — trimming redundant context, stripping boilerplate, and compressing documents — without dropping anything semantically meaningful. The result is roughly 2x more usage out of the same Claude plan.Everything runs locally. Your prompts never touch our servers.Pricing: Free tier available. Paid plans start at $5/mo and are tiered to match Claude's own plan structure (Pro, Max x5, Max x20). 14-day trial on signup.Happy to answer questions about how the compression works, or anything else.
Las Vegas Rolls The Dice On All-Inclusive Hotel OffersLas Vegas travelers can book all-inclusive packages at Luxor and Excalibur, bundling hotel, dining, shows and perks into one upfront price, which offers a budget-friendly way to experience the Strip.
Show HN: Codalotl – Coding Agent for GoI built Codalotl because general coding agents tend to burn time and context exploring large Go repos. Codalotl focuses on a single package at a time, freeing the model of the burden of searching the whole repo. The net result (even for small repos) is a much faster and more efficient agent for working on Go projects: Is 185% faster and 40% cheaper than the Codex when using the same model (gpt-5.4).Besides isolating work to a single package, these techniques are used to optimize token performance:- Auto gofmt and lints on edits (avoids separate tool calls)- Optimized context creation for a Go package (map of files and symbols)- Using other packages by reading their godoc-style public API (instead of reading files)Overall, it’s replaced most of my agent usage for Go development.
Show HN: Aidevshield NPM audit for AI coding tool workflowsI built aidevshield, a free open-source security scanner that catches vulnerabilities in AI coding tool configurations things like Cursor, Copilot, and Cline setups.The problem: AI coding assistants are becoming attack surfaces. In the past year we've seen real exploits:Clinejection (Dec 2025): Prompt injection via GitHub issue titles → AI triage bot executes shell commands → malicious npm package published to 5M users tj-actions/changed-files (Mar 2025): Tag repointing attack hit 23,000 repos via pull_request_target Shai-Hulud (2025): First self-propagating npm worm using postinstall hooks Rules File Backdoor (Feb 2025): Hidden Unicode characters in .cursorrules for invisible prompt injection Existing tools cover parts of this — Zizmor and actionlint for GitHub Actions, Socket.dev for npm — but nothing scans across all four domains: workflows + AI configs + npm packages + prompt injection.aidevshield does. One command, zero dependencies beyond js-yaml, fully offline:npx aidevshield sc
Show HN: Jaypore CI. Minimal offline CI systemHi!I posted this a long time back. There have been major changes so posting it again.- Jaypore CI (JCI) is a very minimal CI system. It's installed as a single binary on your $PATH.- Runs on your laptop enabling offline running and local debugging of CI.- Artifacts / results are stored in git namespaces. You can push/pull these to/from remotes.- A web server is there to browse CI results.- A cron capability to run midnight builds / artifact cleanup / auto-publish sites and packages.- Pipelines can be written in any language you want. Bash / Python / Golang / Julia / Haskell.- Pipelines can have anything you desire! Matrix builds, build farms via ssh, ephemeral farms for model training, conditional dependencies.. so much more!There are a lot more things planned! Do take a look and see if something catches your eye. We'll be rapidly adding examples to showcase common patterns over the coming week or so, so please star the github repo to get an update when that happens.Repo: https://githu
Show HN: OneSentence – An offline macOS voice utility built entirely with AIHi HN, I’m sharing OneSentence, an offline voice utility for macOS (M-series). I built this for two reasons: first, I wanted to see how far I could push cheap AI, and second, I wanted to use this utility. The idea was born out of using Emacs packages with Whisper to dictate to my machine. I had found it effective to simply speak and articulate context to coding agents. OneSentence does four things well: privacy, speech-to-text, text-to-speech, and template insertion.The development process was probably the most interesting part. I used Gemini 3 Pro Preview and 3 Flash Preview almost exclusively (yes, it was not Claude). It went from chatting to writing light specs and decomposing to tasks, to finally setting up a Ralph-style orchestrator that I would leave running overnight. I also had not a few of late nights; making progress this way was exhausting, but still fun. It's not something I ever would have built without AI. The models helped me maintain strict linters, achieve upper-80s te
Is Amazon Shipping Broken for Everyone?I have recently had a whole series of amazon shipping failures. I order a set of 16 packages, got one. Talked to customer service got one again. Ordered a thing that said it would arrive on Tuesday, once I bought it, the order said Friday (+3 days). My last small order is lost in a maze of shipping status messages that are clearly fantasy. It said it was to be delivered the next day, but had not really shipped. Now seems to be lost and Amazon only can deal with delivered items. It has no option for help with items lost in delivery.My sense is that the fantasy of Amazon is now falling apart. They provide shipping status that is dishonest. Is this just an unlucky streak for me? Do they not like me anymore? Or is it for everyone?