Nils Adermann
LightNews LightNews
naderman.de
Nils Adermann
@naderman.de
780 followers 230 following 110 posts
Co-Founder of @packagist.com / http://packagist.com and
Co-Creator of #composerphp - he/him - @[email protected]
Posts Replies Media Videos
Reposted by Nils Adermann
freiheitsfonds.de
Postfach: „Frau P. ist seit 10 Jahren wohnungslos und bekommt endlich Unterstützung durch Housing First. Doch jetzt droht Haft wegen Fahren ohne Ticket. Wird sie eingesperrt, gefährdet das den Erhalt der Wohnung weil die Miete nicht mehr gezahlt wird. Könnt ihr was tun?“

Das Gesetz muss weg. Punkt.
December 23, 2025 at 9:13 AM
naderman.de
Boo, surely you can pack more efficiently after some rose 😜
December 17, 2025 at 8:51 AM
naderman.de
cc @agento.bsky.social 😉
December 17, 2025 at 7:41 AM
naderman.de
There seemed to be some interest in once more this week. So calling you all for Wednesday Brewdog at noon tomorrow
@seidtgeist.com @lstoll.net @chown.de @rkh.cool @felixge.de @trodrigues.net @justine.cool @pudo.org @conniehwong.bsky.social @powen.net @rmehner.bsky.social
a christmas tree made out of pizza slices with a star on top
ALT: a christmas tree made out of pizza slices with a star on top
media.tenor.com
December 16, 2025 at 9:30 PM
naderman.de
Who is joining for lunch one more time this year tomorrow at Brewdog Mitte at 12?
@seidtgeist.com @lds.li @chown.de @rkh.cool @felixge.de @trodrigues.net @justine.cool @pudo.org @conniehwong.bsky.social @powen.net
a woman laying on a bed next to a pizza box that says pizza i love you on it
ALT: a woman laying on a bed next to a pizza box that says pizza i love you on it
media.tenor.com
December 9, 2025 at 7:23 PM
Reposted by Nils Adermann
andrewnez.bsky.social
I’m pleased to announce PromptVer, a new versioning scheme designed for the age of large language models.

nesbitt.io/2025/12/01/p...
nesbitt.io
December 1, 2025 at 12:40 PM
Reposted by Nils Adermann
andrewnez.bsky.social
The package manager in GitHub Actions might be the worst package manager in use today: nesbitt.io/2025/12/06/g...
GitHub Actions Has a Package Manager, and It Might Be the Worst
GitHub Actions has a package manager that ignores decades of supply chain security best practices: no lockfile, no integrity verification, no transitive pinning
nesbitt.io
December 7, 2025 at 7:06 AM
naderman.de
Fascinating evening organized by the @sovereign.tech in Berlin tonight: Presenting their #SovereignTechFellowship program which funds individual open source maintainers of our digital infrastructure with public money.
December 3, 2025 at 9:50 PM
Reposted by Nils Adermann
packagist.com
Proud to announce we just renewed our annual $18,000 sponsorship for the The PHP Foundation!

Check out this summary on the work completed in 2025. So much more could be accomplished, if all businesses using PHP contributed. Sign up as a sponsor and help moving PHP forward!
thephpf.bsky.social The PHP Foundation @thephpf.bsky.social · Dec 3
Thanks to our sponsors for supporting The PHP Foundation in 2025!

Together we helped ship PHP 8.5, released PIE 1.0, supported FrankenPHP, launched the PHP MCP SDK, secured a 2nd STA investment for Streams, and much more.

Please consider sponsoring PHP in 2026 🙏💜

thephp.foundation/blog/2025/12...
Thank you for supporting The PHP Foundation in 2025! Can we count on you in 2026?
The PHP Foundation — Supporting, Advancing, and Developing the PHP Language
thephp.foundation
December 3, 2025 at 3:39 PM
Reposted by Nils Adermann
rudydotca.bsky.social
who decided to call it Secret Santa when Nondisclosure Claus was right there
December 1, 2025 at 10:55 PM
naderman.de
Check out the slides for my talk at
naderman.de/slippy/slide...
naderman.de
December 1, 2025 at 2:59 PM
naderman.de
Back from our annual #SymfonyCon trip! Great experience celebrating 20 years of #Symfony with its community in Amsterdam. The @packagist.com booth was busy throughout the event, and my package manager security outlook talk sparked good conversations. See you in Warsaw 2026! #php #composerphp
Nils Adermann in yellow Private Packagist t-shirt and blue hoodie presenting in front of a crowd at SymfonyCon Amsterdam 2025. Nils Adermann presenting on 2FA enforcement in package manager ecosystems in front of a crowd at SymfonyCon Amsterdam 2025. Nils Adermann presenting at SymfonyCon Amsterdam 2025 on stage, discussing the npm Shai-Hulud Worm security incident. The slide shows details of the November 2024 supply chain attack that compromised 700+ packages and exposed credentials from 26k+ repositories through GitHub Actions code injection. Conference attendees gathered around the Private Packagist booth at SymfonyCon Amsterdam 2025 having discussions.
December 1, 2025 at 2:57 PM
Reposted by Nils Adermann
packagist.com
In Amsterdam next week and part of a group underrepresented at tech confs, or can't afford a ticket? Private Packagist is sponsoring #SymfonyCon (Nov 27th/28th) and we have a ticket to give away: Reply your favorite PHP8.5 feature to win #php #phpc #symfony @symfony.com
November 21, 2025 at 9:52 PM
naderman.de
Really fun to play with Nano Banana Pro and have it visualize things. Here's the good old cube rule of food 😁
November 21, 2025 at 8:37 AM
naderman.de
Great, @github.com giving open source maintainers wrong tax advice 🤦 docs.github.com/en/sponsors/... "In the EU and most other countries and regions, [...] B2B sales are not subject to tax."
Tax information for GitHub Sponsors - GitHub Docs
Sponsored developers and organizations must submit tax information to GitHub and are responsible for evaluating and paying their own taxes.
docs.github.com
November 20, 2025 at 11:39 AM
Reposted by Nils Adermann
packagist.com
New in Private Packagist: Usage Tracking can now help prioritize security updates by showing how deps cascade through projects and where vulnerable versions are used. Trusted Publishing for GitHub Actions and better synchronization setup. blog.packagist.com/whats-new-in... #php #phpc #composerphp
What’s New in Private Packagist, November Update
We've shipped several important updates to Private Packagist over the past three months, including more insights on the package usage tracking page, the introduction of Trusted Publishing for secure a...
blog.packagist.com
November 18, 2025 at 9:35 AM
Reposted by Nils Adermann
packagist.com
After Composer 2.9 CLI security improvements, we're working on a transparency log for Packagist to strengthen PHP supply chain security, funded by the @sovereign.tech with help of the @thephpf.bsky.social and Private Packagist. Details at blog.packagist.com/strengthenin... #php #phpc #composerphp
Strengthening PHP Supply Chain Security with a Transparency Log for Packagist.org
The release of Composer 2.9 this week introduced new security features on the Composer CLI client, which were funded by Private Packagist through service subscriptions. But in parallel, we are working...
blog.packagist.com
November 14, 2025 at 3:35 PM
Reposted by Nils Adermann
seld.be
Composer 2.9 is here! 🚀 It automatically blocks packages with known vulnerabilities, has a new repository command to manage repos from the CLI, and lots more!

blog.packagist.com/composer-2-9/
#composerphp #phpc #PHP
Composer 2.9 Release
We are pleased to announce the release of Composer 2.9.0, bringing improvements to security, repository management from the CLI, and lots more. Automatic Security Blocking Composer now automaticall...
blog.packagist.com
November 13, 2025 at 10:22 AM
Reposted by Nils Adermann
thephpf.bsky.social
The PHP Foundation is Seeking a New Executive Director! 🐘💜

We're asking the PHP community to help find the right person for this role. If you know someone who would be an excellent fit, please encourage them to apply or reach out to us directly.

thephp.foundation/blog/2025/11... #phpc #php
The PHP Foundation is Seeking a New Executive Director
The PHP Foundation — Supporting, Advancing, and Developing the PHP Language
thephp.foundation
November 10, 2025 at 3:03 PM
Reposted by Nils Adermann
seld.be
Composer 2.9 is coming, and there's an RC to try out! We need your help and feedback github.com/composer/com... #composerphp #phpc
Release 2.9.0-RC1 · composer/composer
Composer 2.9 is ready for a release, and we need your help to test it and report any regression. Please try it out! Running composer self-update --preview will get you the 2.9.0-RC1 Running compos...
github.com
November 7, 2025 at 3:40 PM
Reposted by Nils Adermann
rkh.berlin
Was richtig im #Stadtbild stört ist die echt beschissene Sozial- und Verkekerspolitik der Union.
October 15, 2025 at 11:15 AM
naderman.de
Ah and I have to mention everyone individually again I guess 🙈
@seidtgeist.com @lds.li @chown.de @rkh.cool @felixge.de @trodrigues.net @justine.cool @pudo.org @conniehwong.bsky.social @powen.net
October 7, 2025 at 7:45 PM
naderman.de
Who is coming tomorrow? Your mom joining us again?
October 7, 2025 at 7:17 PM
naderman.de
Well I made it to the office today already, so odds are already looking better than last week for me 😆
October 1, 2025 at 6:23 AM
Reposted by Nils Adermann
bsky.neighbourhood.ie
📣 Here’s one for FOSS maintainers based in the EU 🌍

@sovereign.tech is currently accepting proposals from communities that want to enhance their resilience with:

🧱 contributions

🐛 bug bounties

🔍 code audits

Requirements & application: www.sovereign.tech/programs/bug...

Good luck, everyone!
Sovereign Tech Resilience | Sovereign Tech Agency
www.sovereign.tech
September 30, 2025 at 8:58 AM