🔒 The EEF, in collaboration with Alpha Omega, has completed the first comprehensive third-party security audit of the @hexpm.
This work is part of the ongoing efforts to strengthen security across the BEAM ecosystem under the Ægis initiative.
erlef.org/blog/eef/hex-secur…
Securing @hexpm 🔐
Over the past months, a dedicated team conducted the first comprehensive third-party security audit of Hex.pm and its surrounding ecosystem.
This work was made possible by @AlphaOmegaOSS, an initiative under OpenSSF that funds security improvements for critical open source projects, and was carried out as part of the Erlang Ecosystem Foundation’s Ægis initiative.
👉 hex.pm/blog/security-audit
Woot! hex.pm will now serve llms.txt for Elixir/Erlang packages if the accept header is text/markdown. If you have a package and you use ExDoc, update to the latest version (which generates .md files by default) and republish your docs.
Hexdocs now offers @TypeSense-powered documentation search across all packages and versions, link below.
TL;DR:
* Run `mix hexdocs.search` to open a search tailored to your project's dependencies
* Coding agents can use tidewave.ai's MCP to search across your deps docs
* Docs for Phoenix/Ecto/etc can provide cross-dependency search, improving onboarding
ALT New Hexdocs.pm home page.
ALT Search results for Livebook after running `mix hex.search`.
ALT New Phoenix documentation with search across Plug, Phoenix, LiveView, etc.
Fastly has supported Hex with free services for almost 10 years and is what makes mix deps.get so fast for Hex packages. Now @fastly is making their platform available to all developers for free. Check out: fastly.com/pricing
Our next Keynote Speaker spotlight for Code BEAM Europe 2024 is Wojtek Mach 🇪🇺
Wojtek is going to be presenting a deep dive into the major milestones in Hex’s development and ecosystem and see what we can learn from them! 💡
Don't miss out: codebeameurope.com/#CodeBEAM
The Elixir and Erlang docker images the Hex team provides are not affected by the upcoming Free Team changes Docker is making and will continue working after April 13. hub.docker.com/u/hexpm
Just reported a bug in hex.pm, and it took them a few minutes to respond, fix and deploy.. on a Saturday!! Huge kudos to @emjii! There is a reason why we love the Elixir community so much.💙 #ElixirLang#HexPM#myelixirstatus
A new version of Hex has been released that should fix the recent issues with version downgrades and slow version resolutions. Run `mix local.hex` to upgrade.