Archive
OSV-Scanner is Google's dependency scanner, announced in 2022, that queries the open OSV.dev database rather than raw CVE advisories. Because OSV pins each vulnerability to precise commit or semantic version ranges, matching against your actual dependencies becomes deterministic and produces far less noise. It reads npm, Python, Go, Ruby, PHP, Rust and Maven manifests.
n8n is the low-code automation project that has best adapted to self-hosting. A walk through the real install with Docker Compose, the database and queue decisions to make, and the points where most people trip up the first time.
DuckDB has spent two or three years quietly working its way into data architectures. It is no longer just the embedded database for local analytics: in 2025 it keeps turning up in concrete enterprise cases where it replaces far pricier pieces. A tour of the real patterns.
An Authentik Docker Compose install now needs only three containers: PostgreSQL, the server and the worker, since Redis stopped being mandatory in version 2025.10. Once running, it acts as your identity provider for single sign-on over OAuth2, OIDC, SAML and LDAP, and a reverse proxy such as Traefik can delegate authentication to it through forward auth.
CVE-based attack surface management has moved from an abstract list to an engineering practice with real prioritization. We look at how it works once EPSS, KEV and exposure context enter the same equation.
Unikernels were promised as the future of cloud deployment back in 2015, then faded into obscurity soon after. Ten years later, Unikraft has reached a stable release and reads like a more mature, more useful take on that same idea. A review of what has changed.
The term Agent OS has spent a year gaining traction across research and product circles. It describes a layer that goes well beyond an agent library: request scheduling, context management, persistent memory, and isolation. A look at the real state of that concept.
Wolfi turned three as a public project and has become the base for Chainguard container images and much of the industry chasing clean software supply chains. A field-tested review of what it offers against Alpine and Debian slim.
Kata Containers has spent years promising VM-grade container isolation without giving up Docker ergonomics. With the 3.x series now mature under the OpenInfra Foundation, the technical story finally holds together and there is a clear niche where adopting it pays off.
Railway and Render have spent years filling the gap between Vercel and AWS. By the fall of 2025 their offering has matured enough for a seasoned assessment: where they beat Heroku, where they fall short of Fly, and what happens when a bill grows.
