Open-source projects, releases, and notes from Roman Landenband.https://romansky.devenhttps://romansky.dev/updates/local-sandboxing-trade-offshttps://romansky.dev/updates/local-sandboxing-trade-offsWhen process-level isolation is enough, when a VM earns its friction, and how to decide between them.Wed, 01 Jul 2026 12:00:00 GMTpostsandboxingsecuritylocal-developmenthttps://romansky.dev/updates/tanstack-npm-supply-chain-compromise-agentic-codinghttps://romansky.dev/updates/tanstack-npm-supply-chain-compromise-agentic-codingWhy npm supply-chain compromises are also a growing risk for people building agents, MCP servers, skills, and small tools.Wed, 13 May 2026 12:00:00 GMTpostsupply-chainsecurityagentic-codingnpmhttps://romansky.dev/updates/security-for-ai-is-catching-uphttps://romansky.dev/updates/security-for-ai-is-catching-upMapping the architecture, trust boundaries, and security risks emerging around AI and agent systems.Wed, 05 Mar 2025 13:36:17 GMTpostai-securityagentsarchitecturerisk