menu

Recent posts tagged supplychain

Level UI • 22 hours • in Articles • 9 min read
An MCP server is not a new API. It is a thin layer over the one you already have
Somewhere in the last year, "do we need an MCP server?" joined the list of questions that arrive in a brief before anyone has said what the thing is for. It is usually framed as MCP vs API, as though the Model Context Protocol were a newer kind of AP...
post-cover-33074
  • ai
  • api
  • webdev
  • security
9 Reactions 7 Comments
Isha_Gupta • Jun 13 • in Articles • 11 min read
Supply Chain Sense: Merging Gemini AI and Math for Smart Retail Inventory
In neighbourhood retail markets, local Kirana stores, and hyper-local fulfilment centres, inventory management isn't an administrative task—it's a high-stakes daily tightrope walk. If a shop owner over-orders fresh dairy, poultry, or vegetables, the ...
  • python
  • ai
  • supplychain
  • dataengineering
5 Reactions 2 Comments
sachincool • Jun 7 • in Articles • 8 min read
Lazy SRE's guide to secure systems, part 2: the actions you didn't pin
Originally published at harshit.cloudhttps://harshit.cloud/blog/lazy-security-part-2-github-actions on 2026-04-12. Last March, someone with write access to the trivy-action repo rewrote 76 of its 77 version tags in place. The tags still resolved t...
post-cover-19914
  • security
  • lazysre
  • githubactions
  • supplychain
0 Reactions 0 Comments
sachincool • Jun 7 • in Articles • 7 min read
Lazy SRE's guide to secure systems, part 1: the dependencies you didn't read
Originally published at harshit.cloudhttps://harshit.cloud/blog/lazy-security-part-1-supply-chain on 2026-04-05. A few months ago a friend's CI pipeline tried to install a package none of us had heard of. The build failed. The error wasn't a missi...
post-cover-19913
  • security
  • lazysre
  • supplychain
  • npm
2 Reactions 1 Comments
firatcelik • May 26 • in Articles • 1 min read
LibKill v0.1.5
The past 60 days have been brutal for supply chain security: • 639 malicious versions across 323 packages in ONE hour AntV wave • A worm with valid SLSA Build Level 3 provenance TanStack • North Korean APTs injecting malware into "AI-assisted coding...
  • cybersecurity
  • supplychain
  • opensource
  • npm
0 Reactions 0 Comments
avaines • May 13 • in Articles • 5 min read
The Comforting Lie Of SHA Pinning
> Originally published at https://www.vaines.org/posts/2026-03-24-the-comforting-lie-of-sha-pinning/ In March 2026, Trivy became the latest reminder that software supply chains are, at best, loosely held together with convention and trust. A typos...
post-cover-17695
  • thoughtleadership
  • security
  • supplychain
  • githubactions
0 Reactions 0 Comments
Datalaria • Apr 6 • in Tutorials • 3 min read
S&OP Engineering IV: Scaling to Enterprise (Multi-SKU & Bottlenecks)
Your MVP works. One product, one model, one perfect plan. Congratulations: you just solved the easiest problem in Supply Chain. Now add 3 products sharing the same factory. Product A needs 14,000 units in July. Product C needs 13,000 that same month...
post-cover-14033
  • supplychain
  • pulp
  • constraints
  • optimization
1 Reactions 1 Comments
Tom Smithverified • Aug 8, 2025 • in Articles • 4 min read
Russian hackers crippled Toyota by attacking a cup holder suppliers threatening U.S. defense.
From Cup Holders to Aircraft Carriers: How Nation-State Attackers Exploit the Defense Supply Chain's Weakest Links Horizon3.ai's CEO reveals why compromising a small Tokyo parts supplier can shut down Toyota—and what this means for U.S. national se...
  • cybersecurity
  • defenseindustrial
  • supplychain
  • nationalsecurity
4 Reactions 1 Comments
Tom Smithverified • 18 hours • in Articles • 9 min read
Developer Weekly Briefing — October 30, 2026
Security dominated this week, but not in the usual way. Two active campaigns turned GitHub configuration files into attack surfaces. Researchers demonstrated that the built-in browsers inside AI coding tools can read your SSH keys. And at Oracle AI ...
post-cover-33104
  • agenticai
  • devsecops
  • github
  • localai
6 Reactions 3 Comments
Web3Dev • Mar 28, 2025 • in Articles • 3 min read
A Deep Dive into Decentralized Provenance Tracking and Smart Contracts
The global supply chain is a complex web of interconnected processes, often plagued by inefficiencies, lack of transparency, and susceptibility to fraud. While blockchain technology has been touted as a solution, most discussions focus on its applica...
  • programming
  • smartcontract
  • supplychain
  • automation
  • web3
6 Reactions 3 Comments
To see more, click for the full list of posts or popular tags.
chevron_left
🔥 8 posts • 👩‍💻 7 active writers
✨ Want to write in this topic?
Share your learning. Get discovered. Build your profile.
Join CoderLegion
💡 Why developers use CoderLegion
Track learning • Share posts • Get ranked publicly
Create your profile