kept by eddie may 25

Perplexity open-sources Bumblebee, a read-only scanner that checks developer machines for risky packages, extensions, and AI tool configs during supply-chain incidents.

Rethinking Search as Code Generation
Perplexity introduces Search as Code (SaC), an architecture that exposes search stack components as programmable SDK primitives for AI agents to compose via generated Python code.
also on Perplexity Computer, Perplexity, #developer-tools
Perplexity Comet: A Reversing Story
The article provides a technical deep-dive into Perplexity's agentic browser Comet, detailing its dual-channel communication, hard boundaries, and page representation for AI interaction.
also on Comet, Perplexity, #security, #developer-tools
{{IW4QaZoc2}}
Perplexity launches Personal Computer for Mac, enabling local AI agents that work across files, apps, and the web with continuous autonomous operation.
also on Comet, Perplexity
How to Evaluate an npm Package - 2026 Edition
A practical checklist for evaluating npm packages in 2026 covering security, maintenance, provenance, CI quality, and incident response to make informed dependency decisions.
also on #supply-chain-security, #security, #open-source, #developer-tools
Package Managers Need to Cool Down
A survey finds that while many package managers and update tools have adopted dependency cooldowns to prevent supply chain attacks, implementations vary wildly in naming, scope, and timestamp handling, and major ecosystems like Go, Maven, and Gradle still lack support.
also on #supply-chain-security, #security, #open-source, #developer-tools