

I found the original blog post more educational.
Looks like these may be typosquats, or at least “namespace obfuscation”, imitating more popular packages. So hopefully not too widespread. I think it’s easy to just search for a package name and copy/paste the first .git files, but it’s important to look at forks/stars/issue numbers too. Maybe I’m just paranoid but I always creep on the owners of git repos a little before I include their stuff, but I can’t say I do that for their includes and those includes etc. Like if this was included in hugo or something huge I would just be fucked.
I’ve been getting annoying amdgpu crashes every now an then. I’ve tried all the various BIOS and kernel params but so far nothing has worked. Next step is rolling back a kernel version, at least that’s what I’ve gathered from all the threads about it. It’s bothersome but not frequent enough to be a real pain.
(This is an amd framework 13 with fedora 42 / wayland)