I did try 3.6 on my main desktop. It was good, but I didn't see much differences than coder, so I am still using my old rig.

I mostly use it as a google search if I forget a thing, or doing the boilerplates.

I am using a mix of a non harness chat for the reply speed, and opencode / vim-ai for my boilerplates.

$0.00 / month. That's the budget.

They couldn't see that coming, but for sure they can predict how the future will be when it's time to sell their "visions" of the world.

Meanwhile, sheep's are going to believe and max their token usage with their own wallet. "You are so be left behind if you're not".

It's a mass psychosis. The only winners here are the hardware manufacturers, like nvidia for instance.

How can you come up with such non sense.

I don't know what TFA is talking about.

Maven doesn't have "preinstall, install, post install", or " build.rs" for rust, executing arbitrary code during the installation.

The code that's executing with Maven is in your pom.xml, not some hidden code from a transient dependency.

That alone is a major design flaw in both npm and cargo.

Java is boring, because it works. People don't like boring stuff. It's more exciting to play the Russian roulette on each install!

I would like to see the same hate comments about Linux than the ones we would see if it was a Windows vulnerability...

No offense.

Each time I read about the monstrosity of an external company owning all my passwords, taking into account all the leaks and supply chain attacks these days... I feel good "self hosting" what could be the most sensitive information that I have.

With the new generation of yolo NPM scripters, they simply don't evaluate the risks. They will even fight back telling you that it's the way of doing things.

In reality, it's the warning we learnt back then, that's the result of be mindlessly importing third dependencies without thinking.

In other words, the risks were always there, the new "modern way", let's put it that way, doesn't put the effort anymore.

[1] https://www.businessinsider.com/github-ceo-developers-embrac...

Is it me ore I am seeing more and more projects being unmaintained due to financial and/or mental fatigue?

[1] https://blogs.gnome.org/chergert/author/chergert/

[2] https://github.com/nvim-treesitter/nvim-treesitter/discussio...

[3] https://discourse.gnome.org/t/stepping-down-as-libxml2-maint...

`cargo audit` finds 3 vulnerabilities, you should fix them.

Blazing safe.