Michael Bargury

Security research, hacking, AppSec, primarily focused on AI agents.

less than 1 minute read

Tidelift continues to publish periodic data shares. The last one before this one was on Nov 2020, the month of the libraries.io acquisition.

19 Jan 2021 - 17 Feb 2025

Tidelift continues to publish periodic data shares. The last one before this one was on Nov 2020, the month of the libraries.io acquisition.

  • 35 package managers - 2.6 million projects - 12.1 million versions - 73 million project dependencies - 33 million repositories - 235 million repository dependencies - 11.5 million manifest files - 50 million git tags

Compared to the Nov 2020 release there are 1m LESS projects and one more package manager. The rest are incremental additions.

Updated:

You May Also Enjoy

Make Real Progress In Security From AI

1 minute read

I gave a talk at the AI Agent Security Summit by Zenity Labs on October 8th in San Francisco. I’ll post a blog version of that talk here shortly.

How Should AI Ask for Our Input?

2 minute read

Enterprise systems provide a terrible user experience. That’s common knowledge. Check out one of the flash keynotes about the latest flagship AI product by ...

Someone Is Cleaning Up Evidence

1 minute read

AWS security blog confirms the attacker gained access to a write token and abused it to inject the malicious prompt. This confirms our earlier findings.