Skip to content
Blog
Updates, analysis, and guides from the GPC project.
What We Actually Did About npm Supply Chain Attacks
Yasser Berrehail
npm supply chain attacks compromised hundreds of packages in 2025-2026. Here is every concrete protection a small CLI project shipped, and how you can adopt the same patterns.
securitysupply-chainnpmci-cdoidc
Google I/O 2026: What Changed for Android CLI Tools
Yasser Berrehail
Google I/O 2026 stabilized Android CLI 1.0, launched AI Studio internal-track publishing, and shipped new Play Developer API fields. Here is what it means for GPC.
google-io-2026android-cliplay-apiai-studio