What have I been writing when I haven’t been writing here?

Duck Alignment Academy

• “Finished” and “no longer developed” aren’t the same — Software is finished when it reliably does what it’s intended to.
• Your project is political, people’s identities aren’t — No project that involves people is “purely technical.” And “ideologically motivated” is not a synonym for “bad”.
• A veneer of organization — Building up too much process early is a way to look busy without accomplishing anything. You have to fit it to the community’s need.
• When to add QA to your project — Add QA when someone volunteers to do it. Recruit QA when your user-reported bugs start to overwhelm your developers.

Kusari

• Achieving Wisdom with GUAC Visualizer — It’s not enough to just have the data, you need to be able to see it.
• Why Software Cannot Be Secured by SBOMs Alone (ghostwrite) — Actionable insights come from SBOMs plus additional information.

GUAC

• GUAC v0.8.0 released — The new release includes support for licenses, node deletion, and more!