MurphyA/hacker-news huggingface dataset:
Show HN: DepHealth – Health score for your project's dependencies
by nrig | 2025-11-10 13:36:30+00:00
I needed a way to quickly understand the true state of dependencies across my projects – which ones pose real risk and which updates are actually urgent.

DepHealth analyzes any public GitHub repo and gives you:

• Overall health score (0-100) based on security, drift, and lifecycle

• Prioritized action list (actively exploited CVEs ranked first via CISA KEV)

• Combined view: vulnerabilities + version drift + EOL status

Try it: https://dephealth.io (no signup, most repos analyze in under a minute)

The goal is to give you instant visibility into dependency health without manual audit work. Uses exponential decay scoring so large projects aren't unfairly penalized just for having more packages.

Technical bits: • 8-tier prioritization system (exploited → critical → high → outdated)

• 7 ecosystems: npm/yarn/pnpm, composer, poetry/pipenv, go modules

• Built with Laravel + Vue3, Clean Architecture (DDD)

• Free for public repos

Built this over 3 months as a side project. Would love feedback on the scoring algorithm and prioritization logic—does it feel "fair" for your projects?
by tleyden5iwx | 2025-11-10 13:36:41+00:00
I built Arty: https://github.com/vibemachine-labs/arty

It's an open-source iOS voice agent that uses the OpenAI Realtime API (bring your own key).

Current connectors: Hacker News (check demo in readme!), Google Drive, GitHub, and web search.

I got frustrated with the limitations of the OpenAI Realtime Voice iOS app—for example, it can't even connect to Google Drive.

Arty is self-contained except for the OpenAI model and any third-party services you connect to. Uses local tools—no MCP support yet.

If you'd like additional connectors, feel free to open an issue.
by MongooseStudios | 2025-11-10 13:37:10+00:00
Location: Austin, Texas Remote: Preferred Willing to relocate: Maybe Technologies: Go(Golang), Python, C#, C, Jenkins, Kubernetes, miscellaneous other things, if I don't know it I'll learn it. Résumé/CV: mongoosestudios.github.io Email: Located on the about page (not the landing page) of the link above.

Mostly a back end dev. I've done a little front end and DevOps work here and there. Vibe Coding and AI shops need not apply.
by RickJWagner | 2025-11-10 13:38:15+00:00
Here are some examples of how serious the problem is:

Dan Rather, a leading anchor for 60 Minutes, tried to shame George W Bush by airing forged documents. When revealed, Rather was fired.

When Hunter Bidens damning laptop was discovered late in the election cycle, nearly all mainstream news sources ignored it. A shared letter signed by 50 ‘experts’ called it ‘Russian disinformation’. Today it is quietly acknowledged that the story was true. This was especially egregious given the proximity to the 2020 elections.

Earlier this year, ABCs anchor George Stephanopolous was sued by Trump after he repeatedly called Trump a rapist, a false charge. ABC settled, paying $16m.

Likewise, Trump sued 60 Minutes for editing a Kamala Harris interview to improve her responses to a question. CBS settled by paying Trump.

Those are direct political hits. They’re worse than examples like the Covington High vs Native American hoax, Katie Courics second amendment edit, Anderson Cooper standing in a flooded hole, etc.

Please give me a single example of a news source telling such outrageous lies against a Democrat. Note that the above examples are not second hand lies repeated— they are lies coming straight from the news source.
by znort_ | 2025-11-10 13:38:16+00:00
agile is a mixed bag with some quite good ideas and practices, but imo the main selling point for industry is that it allows complete dillution of compromise and responsibility, and it shows. this is why companies have bought en masse into the snakeoil and imo that's the main reason for quality problems: follow these rituals (without any regard to the core concepts behind them) and everything will be fine, and if it doesn't it was not our fault, "change is inevitable and shit happens".

also, qa is simply not optional, and agile actually stresses that pretty strongly.
by bazzargh | 2025-11-10 13:38:33+00:00
One of the results for hilbert curve marble tracks, mentioned elsewhere in the thread, was a video showing how to make one in blender, which has a physics engine so it can simulate it pretty well.

https://www.youtube.com/watch?v=8YeXyUNCnhM

I'd imagine that the 3d-printable models could be imported into blender, so it's 'just' adding balls and motion to the lift.
by vel0city | 2025-11-10 13:38:53+00:00
Every platform has some hardware that has issues with sleeping. I've had numerous Linux machines that entirely fail to resume often, this current MacBook I'm on fails to properly reconnect things on USB hubs after a resume, etc. The grass is always greener.

Try sleep study on your current machine. I had an issue with one machine constantly waking from sleep. Lots of other tools couldn't clue me into what was going on and why the system was actually waking. Sleep study pointed exactly to the device causing problems, disabling it from waking the system solved my sleep problems on that device.

https://learn.microsoft.com/en-us/windows-hardware/design/de...
by ErroneousBosh | 2025-11-10 13:38:57+00:00
It's the common problem with almost anything in physics or chemistry.

The Good Stuff has some horrible flaw that makes it incredibly dangerous.

When we invented refrigerators first, they used ammonia as a refrigerant which was awesome at moving heat around. It's still used industrially but people die from ammonia leaks. Then they swapped it for freon, which was just about as good at moving heat around, but rotted holes in the ozone layer. So they got replaced with R-134 which wasn't as bad for the ozone layer (but still not great), slightly more toxic, and still quite nasty stuff to handle.

At present the best bet for refrigerants turns out to be good old propane, which if anything is a little too good at moving heat around (and your evaporator will freeze if you're not careful), reasonably non-toxic (don't breathe it in, but unlike ammonia a tiny amount in a room won't dissolve your lungs), and its only real downside is that it burns. People are worried about using C3 or C5 (pentane) refrigerant in cars, but the worst that would happen is you'd release about a deodorant can's worth of the stuff into something that's already on fire and contains maybe 70 litres of petrol. Your petrol tank is a bomb, made of a leaky plastic bucket full of explosive. The aircon having a cupful of LPG in it is not your problem in an accident.

Thus it is with batteries.

It turns out that one of the best kinds of batteries you can make in terms of longevity, power density, and stability is a couple of bits of lead in a bucket of sulphuric acid. They work great. They're in production today, and will probably be forever. Your car has at least one (mine has three, a massive one up front for starting the engine and a couple of smaller ones in the back for running things like the radios and inverter when I'm stopped).

However, lead compounds are pretty nasty, sulphuric acid is pretty nasty, they're heavy, they will stop working if you leave them discharged, and in general people would like something smaller, less corrosive, and less dependent on digging up vast areas of China to pull poisonous dust out of the ground.

So we have NiCads (oh dear, cadmium, one of the nastiest poisonous metals because it's poisonous all by itself - it doesn't need to be complexed to something organic to get in you), then NiMH (cheaper, non-toxic, and more-or-less a drop-in replacement for NiCads in any given application). Then we've got the various rechargeable lithium batteries which can do exciting things when damaged.

But for high power density, low cost, and and high current applications where you don't have to worry about carrying them or tipping them over, you're going to be stuck with lead in a bucket of acid for a while I suspect.
by iamnothere | 2025-11-10 13:39:52+00:00
This is true but I can imagine where they might go after the lowest reachable branch of the tree, up to threatening to remove country-level TLDs from the root servers for noncompliance. Only the US really has the leverage to do this, and it would just fragment the internet, as additional root servers would pop up to serve the missing TLDs. So it’s unlikely but possible.
by crote | 2025-11-10 13:40:45+00:00
It's insane that their don't have proper support for multilingual people. How hard is it to add a "if language is in [x,y,z], don't offer translation" check?

It's made even crazier by Google being such an international company. Don't they have a huge number of Indian developers? Why has not one of them been bothered enough by this to fix it?
by casey2 | 2025-11-10 13:41:01+00:00
That's how computers and software work by default. It's an entirely different business philosophy. We can gain more market share but having a just works software environment for as many people as possible VS we can resell people the same software over and over again.

You're impressed that they managed to fill their diaper for so long without any leaks? Linux can read the oldest unix file, compile and run the oldest programs. Their "backwards compatability" is entirely a self created problem, they realized they can capture more value, in the short term, if users only see a binary so they have to implement a technically flawed solution.
by dijit | 2025-11-10 13:41:22+00:00
Ordinary folks are going more and more chromebooks these days, those are the "low cost laptops" that are on the shelves at your local bestbuy/curry's/elgiganten etc;

For everything more than that: the Macbook Air is equivalent or cheaper.

People seem to continue the lie that Apple hardware is more expensive, yet I just closed a deal on a business thinkpad (T14s Gen6) which was double the price and 2/3rds as performant, because we're a Windows shop and we don't buy Apple. Forgive my annoyance here but someone told me that "at least we don't buy expensive Macs" after we signed the invoice and it really got under my skin because it's legitimately half the price for more power. Completely blinded by ignorance.

Upgrades might be expensive, sure, but anything of any quality has always been like-for-like with Apple being cheaper on the low-spec end.

The consumer grade market where Windows used to dominate is having their lunch totally stolen by Chromebooks and Android Tablets. (More-so by Tablets I would argue).
by latexr | 2025-11-10 13:41:46+00:00
> Identity doesn't matter. Ideas matter.

Your ideas are shaped in large part by your identity, which includes your socio-economical background, race, gender, sexual proclivity, country, and on and on.

When you are only exposed to ideas from the same homogeneous group, your view of our heterogeneous world becomes deeply flawed. Diversity of identity is paramount for a diversity of ideas.
by TrackerFF | 2025-11-10 13:42:02+00:00
The hard truth is that companies overhired the year after COVID hit, and have spent the last year or two laying off those. If you look at any graph showing job listings, one will see that during COVID year (back to ZIRP), the numbers exploded. In the year prior to that, from '18 to '20, the numbers of job listings had started to flat out. Remember that the interest rates were going up back then, until COVID hit.

Right now the number of job listings is roughly following the same trajectory as prior to COVID. Meaning that if you had built some regression model up until COVID, the model would put us around where we are today.

For the young people that have never experienced this, it has happened before. And it will happen again. Most people are lucky enough that they will only experience this after big financial crashes, while others work in industries with natural boom and bust cycles.

One day recruiters will wine and dine you, promising a job 12 months before you graduate, with a fat signing bonus and other perks. The next day they'll ghost you. I've gone through two of these.
by kldg | 2025-11-10 13:42:28+00:00
this is the line of thinking which led me to furnish daughter with Windows laptops and, later, desktops; I remove the adware & spyware to some degree, but Windows (and I assume Mac, but I'm not in that space) has the benefit of generally being reasonably intuitive for basic use WITHOUT A CHEAT SHEET and, importantly, fast and easy to teach intermediate use of. if she wants to know how to enable literal (that is, correct) filename sorting in File Explorer or write an HID driver, I'll be here. + I sure don't feel like debugging every strange artifact appearing in Steam games as a result of emulation.

one thing I have protested, to the point of being obnoxious, is school-managed Chromebooks. I've talked to every principal of every school she's been in since Covid-19 to persistently request I be allowed to furnish a Windows laptop or at least a Chromebook I manage. -and in a bit of a surprise to me, everyone's been accommodating (though never to let her use a Windows laptop; I think maybe providing it as an option makes breaking policy to let her bring a self-managed Chromebook seem reasonable). I argue I operate web services with user information at home and don't want school employees on my network, and I don't want the financial liability of her accidentally damaging school property.
by nityasha | 2025-11-10 13:42:50+00:00
Great question! While there is some overlap in the AI assistant space, here’s what sets Nityasha apart from Glean, Gumloop, ChatGPT apps, and Claude MCP:

Persistent Memory Across Everything. Nityasha remembers your preferences, context, and conversations across all sessions and devices. You can pick up a conversation weeks later right where you left off. Most ChatGPT apps reset context, but Nityasha builds a long-term understanding of you.

Actual Action-Taking, Not Just Chat. Unlike pure chatbots, Nityasha directly connects with your tools to take real actions. Glean focuses on enterprise search across apps, whereas Nityasha actually performs tasks like sending emails, scheduling meetings, and managing your workflow.

Built-In Roadmap & Sprint Planning. We offer a native Kanban-based project management tool with 30-day growth sprints, priority tracking, and four-column workflows (Planned, In Progress, Updated, Completed). This is integrated and not a separate tool that requires context-switching.

Personalized for Individuals, Not Enterprises. Glean targets enterprise knowledge management, Gumloop focuses on workflow automation, and Claude MCP is about protocol-based integrations. Nityasha is designed as your personal productivity companion, featuring AI CRM for contacts, habit tracking, and goal breakdown.

Human-Centric Learning. Our Study Mode uses multiple types of input (voice, image, text) and does not just provide answers—it guides you to learn. It’s designed for teaching, not just for answering questions.

The main difference: a unified experience versus fragmented tools. Instead of switching between 15 or more apps or trying to connect multiple AI agents, Nityasha provides one conversational interface that remembers everything and manages email, calendar, tasks, research, and planning in one flow.
by matt_s | 2025-11-10 13:43:20+00:00
I think creative types feel compelled to do new things that buck trends and are just different for the sake of being different. If you watch any amount of home renovation competition shows, there's always designers that pick some really odd/different elements. It might look good on TV and get people to watch but its a tiny minority that really wants a black wall in their living room.

Its much easier to do web design this way, its just software.

I'm not knocking it, it must suck to be a designer and end up having to do the same corporate looking stuff day after day.
by smusamashah | 2025-11-10 13:43:38+00:00
This is great!

1. Does it include comments from ALL previous WAYWO posts?

2. Add navigation by page too. Currently I can press next, but it does not reflect in the URL, which means I can't jump to middle or at the end.

Looks like that paging is artificial and data is loaded once on first load. You could also add how many posts to show on single page.
by lunar_mycroft | 2025-11-10 13:43:59+00:00
"effecting something else" (i.e. escaping the sandbox) is the core issue. JavaScript (and WASM) engines have to be designed to defend against the user running outright malicious scripts without those scripts being able to gain access to the rest of the browser or the host system. By comparison, potentially exploitable but non-malicious, messy code is basically a non-issue. Any attacker that found a bug in a sandboxed XSLT polyfil that allowed them to escape the sandbox or do anything else malicious would be able to just ship the same code to the browser themselves to achieve the same effect.
by dtagames | 2025-11-10 13:44:22+00:00
So someone with $60 of capital can now drive on public roads with FSD turned on? What could go wrong?

When you get a motorcycle endorsement in the US, the book tells you the #1 cause of motorcycle accidents is riding a bike you don't own. When you have a bike, this is obvious because they all handle differently.

What if this turns out to be true for automated cars (even just ones with new UIs)? Won't accidents increase due to the driver's unfamiliarity with how to safely use the new systems?
by bayindirh | 2025-11-10 13:44:40+00:00
From what I see, Deco BE series have multiple models, with slightly different port configuration. Looks like BE65 comes with 4x 2.5gbE and BE65 comes with 2x5gbE + 1x2.5gbE. Moreover the site has multiple other Deco BE models. Both BE63 and BE65 is on sale and can be purchased.

From my experience, TP-Link makes hardware changes with "H/W versioning" in their model numbers. I have many RE220 extenders with different hardware revisions, earlier ones doesn't supporting OneMesh. However, I don't find later versions performing worse w.r.t. earlier ones.

However, $500/unit, the backbone of the devices doesn't look underpowered, esp. when looking to both wireless and wired specs. Considering my RE700X is saying what's written on the tin, and being rock-solid despite working with a non TP-link device and and being behind two 30cm walls.

I expect these Deco devices to live up to their specs.
by littlestymaar | 2025-11-10 13:44:48+00:00
> Sure, but translating that movement to actual policy change usually depends on how much uninvolved people are sympathetic to the protestors

No, that's the exception rather than the rule. That's a convenient thing to teach to the general public and that's why people like MLK Jr. and Gandhi are being celebrated, but most movement that make actual policy changes do so while disregarding bystanders entirely (or even actively hurting bystanders. That's why terrorism, very unfortunately, is effective in practice).

> which usually involves how rational the protestors are precieved as

I'm afraid most people don't really care about how rational anyone is perceived at. Trump wouldn't have been elected twice if that was the case.

> Decision makers are affected by public sentiment, but public sentiment of the uninvolved public generally carries more weight.

They only care about the sentiment of the people that can cause them nuisance. A big crowd of passively annoyed people will have much less bargaining power than a mob of angry male teenagers doxxing and mailing death threats: see the gaming industry.

> I disagree with this. Rational arguments behind closed doors happen before resorting to protest not after.

Bold claim that contradicts the entire history of social conflicts…
by oulipo2 | 2025-11-10 13:45:27+00:00
Indeed! We've been asked for the USB-C quite a bit so we might do that in a future version, but it increases the BOM price for our shared mobility fleet customers which are quite price sensitive!

Indeed it's 199 eur, but it's high-quality, certified, comes with a waterproof and fireproof casing, connected, with real-time safety alerts, and when you'll eventually need to change the cells, you'll only pay 50 eur to refill your battery!

Compared to that, an equivalent Bosch battery goes for 500 to 700 eur (for the same quality). We're even compatible with Bosch gen 2/3/4 (non-smart)
by zdc1 | 2025-11-10 13:45:29+00:00
If anyone is looking at options in this space, I used to use Media Monkey for organising and curating my large offline music collection. It did things like metadata and album art management, album-level volume levelling, and would even reorganise the file structure of your music to whatever pattern you set.

I also loved that you could set up separate "libraries", so I could have metal and classical arranged by album, and EDM as a bunch of single tracks that are organised into playlists. Only downside is that it's Windows software.
by alisonatwork | 2025-11-10 13:45:31+00:00
I use MusicBee for everything too and sounds like my workflow is the same as yours. I basically take whatever is tagged on the file straight out of Bandcamp and then manually follow Discogs-like rules for normalization of the artist name so the directory structure works out, plus adding iTunes compilation metadata to deal with the "various artists" issue, adding BPM, customizing genre and comments etc.

I think I started all this fussiness exactly because back in the old days when you synced to CDDB, you'd get somebody else's useless record label classification for a reissue or international release that obscured the original label, which in certain genres of music is quite important to be able to better categorize the music for auto playlists. Original year is also critical for auto playlists where you're looking for tunes around a certain era. I also have a vague memory of old CDJs or Serato or some damn thing not displaying the name I wanted so having to shuffle stuff around to Composer or Album Artist or something to make it work, and now here I am with custom-tagged all the things.

My problem is I was considering replacing all my 320k MP3s with FLACs, which I have for all my Bandcamp purchases and most of my CD rips (although not from Beatport and other online stores)... but I realized it was going to be absolute hell to try and match the untagged files that I downloaded and put straight into cloud storage with the tagged files I already have in the library. It would need some kind of heuristics to fuzzy match the files with what's already there, then retag them with my preferred tags from the MP3, then move the file into the same location the MP3 is, then move the MusicBee proprietary metadata (play count, add date etc) across, then delete the MP3. I keep thinking there has to be a program or a plugin for this, but seems like not, so for now I've just given up and decided that 320k is good enough, actually, which makes me wonder why I'm keeping all these FLACs around in the first place. Not like I'm starting the Library of Alexandria here, I just like music.
by klodolph | 2025-11-10 13:45:32+00:00
Having used XSLT, I remember hating it with the passion of a thousand suns. Maybe we could have improved what we had, but anything I wanted to do was better done somehow else.

I'm glad to have all sorts of specialists on our team, like DBAs, security engineers, and QA. But we had XSLT specialists, and I thought it was just a waste of effort.
by calenti | 2025-11-10 13:45:44+00:00
To me the terms mix and it helps to separate the things that are externally manageable from the things that are not. The physical is complex but straightforward - the body biochemistry operates on material in, biochemistry mix, expenditure out. The brain is physical - neurons, pathways, etc. The mind, OTOH, is a virtual little candle isolated in a prison of meat and bone trying to understand how to interact with the world around it. External forces can alter the body and brain, but only the mind can change the mind. And does, in ways that are very difficult to control because the sole operator is part of the mechanism. People who try to change on their own and can't aren't failing or weak, it's just really f-ing hard.