Over the past two months, we’ve seen some of the most serious supply chain attacks in npm history: phishing campaigns, maintainer account takeovers, and malware published to packages with billions of weekly downloads. What is going on?! What can we do about it? Our old friend, Feross Aboukhadijeh, joins us to help make sense of it all.

Charlie Marsh built Ruff (an extremely fast Python linter written in Rust) and uv (an extremely fast Python package manager written in Rust) because he believes great tools can have an outsized impact. He believes it so much, in fact, that he started an entire company that builds next-gen Python tooling.

On this episode, Charlie joins us to tell us all about it: why Python, why Rust, how they make everything so fast, how they’re starting to make money, what other products he’s dreaming up, and more.

Andrew Churchill thinks companies should really be hiring junior engineers, Addy Osmani announces Chrome DevTools MCP, GitHub lays out a roadmap to fend off npm attacks, Jerry Liu builds an app that generates a timeline of your day’s activities, and Sean Goedecke attempts to define “good taste” in the context of software engineering.

Bryan Cantrill and Steve Tuck, the co-founders of Oxide, are on the pod live (to tape) from the stage at OxCon. Jerod and I were invited to Oxide’s annual internal conference to meet the people and to hear the stories of what makes Oxide a truly special place to work right now. The best part was this on-stage discussion with Bryan and Steve. Enjoy!

Voices of Oxide on the pod! Cliff Biffle (engineer), Dave Pacheco (engineer), and Ben Leonard (designer) are on the show today. Jerod and I were invited to Oxide’s annual internal conference called OxCon to meet the people and to hear the stories of what makes Oxide a truly special place to work right now.

Cliff Biffle is working on all Hubris and firmware. Cliff says “There’s a lot that happens before the ‘main CPU’ can even power on.” Dave Pacheco is leading the efforts on Oxide’s “Update” system. And Ben Leonard in charge of all things brand and design at Oxide.

Adolfo Ochagavía believes we’re approaching the problem of configuration from a flawed starting point, Annie Mueller hits us with a wakeup call about how she reads beginner tutorials, Brian Kihoon Lee spends some time meditating on taste, Namanyay thinks vibe coding is coders braindead, and Can Elma speculates on why AI helps senior engineers more than juniors.

Carl George joins the show to talk about Texas Linux Fest, Omarchy, Linux desktop environments, configuring Linux, and more. Use the code CHL15 for 15% off your ticket to Texas Linux Fest.

Zach Gates quantifies the value of automating things, Albania’s new prime minister names an AI “minister” to his Cabinet, Eckart Walther launches Really Simple Licensing (RSL) along with some big names on the web, Vishnu Haridas praises UTF-8’s design, and Justin Searls disagrees with last week’s headline story about AI coding tools and shovelware.

Mike Judge breaks down why he doesn’t believe the AI coding claims add up, the folks behind Cactoide create an open source alternative to Meetup / Eventbrite, Ryan Farley tells the story of how RSS beat Microsoft, Dominik Szymański ditched Docker for Podman (and thinks you should too), and Stripe announces a new layer 1 blockchain called Tempo.

Jim Remsik has lived on the bleeding edge (but also the heart’s center) of the Ruby world for decades. This fall, he’s organizing six (yes, SIX) XO Ruby confs all around the United States.

On this episode, Jim joins us to reminisce about the early days of Ruby and Rails, share what he’s learned from so many years of organizing events, and invite all of us to join him on his upcoming 7500 mile road trip.

Dominik Meca is infuriated by Next.js, Josh Bressers explains why open source is just one person, Huon Wilson describes the usefulness of “Copy as cURL”, Herman Martinus re-licenses Bear, and Nawaz Dhandala unpacks why dependency bloat is such a pervasive problem.

Arun Gupta, now a “free agent” after his surprise exit from Intel, joins us to discuss how he’s dealing with his first job hunt since the 1990s. Along the way, we talk about agentic coding strategies, what GPT-5’s release implies about the future, and more. (US buys 10% of Intel)++

Our friends at Cult.Repo launched their epic Python documentary on August 28th, 2025! To celebrate, we sat down with Travis Oliphant –creator of NumPy, SciPy, and more– to get his perspective on how Python took over the software world.

Stick around for the twist ending! We set aside Python and dissect Travis’ big idea to make open source projects financially sustainable through direct investment.

Elon Musk and xAI take on Microsoft, DHH ships version 2 of Omarchy (his love letter to Linux), Glyn Normington on managing developer’s block, Mitchell Hashimoto declares that all Ghostty contributions must disclose AI tooling, the United States government takes a 10% stake in Intel, and Adam Derewecki thinks we should do things that don’t scale, then don’t scale.

Our Changelog & Friends proof-of-concept with Mat Ryer has been remastered! Now with full-length video on YouTube. Originally recorded: 2023-02-08

Mat joins us for some good conversation about some Git tooling that’s been on our radar. We speculate, we discuss, we laugh, and Mat even breaks into song a few times. It’s good fun.

Cursor has a big problem, Alireza Bashiri thinks plaintext beats todo apps, Manish built an offline AI workspace, OverType is a WYSIWYG markdown editor that’s just a textarea, and sshrc lets you bring your config with you to remote machines.

Bryan Cantrill returns in the wake of Oxide Computer Company’s $100M Series B. Bryan tells us how he’s avoiding an appearance on Silicon Valley (ding), why their uniform compensation is working, where Oxide fits in the AI datacenter, what scaling to 50+ rack orders looks like, and more. (GitHub has no CEO and saving Intel)++

Dr. Ewelina Kurtys is leading the way in biocomputing at FinalSpark where she is working on the next evolutionary leap for AI and neuron-powered computing. It’s a brave new world, just 10 years in the making. We discuss lab-grown human brain organoids connected to electrodes, the possibility to solve AI’s massive energy consumption challenge, post-silicon approach to computing, biological vs quantum physics and more.

Open source maintainers share their regrets, Thomas Dohmke steps down as GitHub CEO, James Kettle breaks down HTTP/2 from a security perspective, PHP is getting the pipe operator this November, and a class action copyright suit threatens Anthropic and the rest of the AI industry.

Gerhard calls Kaizen 20, ‘The One Where We Meet’. Rightfully so. It’s also the one where we eat, hike, chat, and launch Pipely live on stage with friends.