4 stories
Output defaults to readable text with JSON, JSONL, raw and YAML options, and --transform extracts fields with GJSON syntax. Setting OPENAI_UNTRUSTED_STDIN=1 blocks reading files from piped input.
Install by Homebrew, release binary or Go 1.26.
The top HN threads: facts from the discussions, both sides, insider voices. Email, Telegram, or RSS.
The fix, tracked as CVE-2026-111943, filters out chains containing the distrusted intermediates; backports were opened for Go 1.26 and 1.27.
Gossamer (v0.19.1) offers Result/Option, traits, typed channels on an M:N scheduler, no async coloring, no unsafe, no macros — memory via deterministic reference counting plus arena regions. It reads like a greatest-hits of modern language design.
The takedown was specific: dropping the last reference to a 10,000-node cyclic graph is a stall, so “pause-free” is marketing; and the compiler is written in Rust, which for a self-described systems language is the tell.
Kage drives headless Chrome to render a page the way a human sees it, snapshots the settled DOM, deletes every script, downloads CSS, images and fonts locally, then bundles the mirror into a standalone binary or a ZIM archive.
The first reply pointed to SingleFile, which packs a page into one self-contained HTML file with no server needed. A security researcher caught Chrome launched with --no-sandbox; others called the README LLM slop and assumed the code was too.
