Hacker News: martmulx

New comment by martmulx in "Show HN: I built a tiny LLM to demystify how language models work"

martmulx — Mon, 06 Apr 2026 03:33:19 +0000

How much training data did you end up needing for the fish personality to feel coherent? Curious what the minimum viable dataset looks like for something like this.

New comment by martmulx in "Axios compromised on NPM – Malicious versions drop remote access trojan"

martmulx — Tue, 31 Mar 2026 08:57:52 +0000

That's solid, really helps lock down the supply chain attack surface. Do you ever end up having to whitelist anything that legitimately needs to run on install?

New comment by martmulx in "Axios compromised on NPM – Malicious versions drop remote access trojan"

martmulx — Tue, 31 Mar 2026 04:05:07 +0000

Does pnpm block postinstall on transitive deps too or just top-level? We have it configured at work but I've never actually tested whether it catches scripts from packages that get pulled in as sub-dependencies.