The thing is that hook is not enough: `UpgradeSelect` only applies to `yay -Syu` so it only filters the upgrade list.

Nothing protect you from a `yay -S foo` install and its dependencies. So this is not a guarantee or enforcement of a minimum release-age.

Actually writing this reply I went ahead and pointed that out in an issue at: https://github.com/Jguer/yay/issues/2883

The issue you linked isn’t anything to do with the issue you’re describing. Wrong one referenced?

I have you covered: https://kdeldycke.github.io/meta-package-manager/install.htm...

(this is mpm, a Meta Package Manager)

I maintain `repomatic`, a Python CLI + reusable workflows. It bakes most of the practices from this post into a drop-in setup for Python projects (uv-based, but works for others too). The goal is to make the secure default the easy default for maintainers who just want to ship packages. Also addresses a lot of GitHub Actions own shortcomings.

But thanks to the article I added a new check for the fork PR workflow approval policy.

More at: https://github.com/kdeldycke/repomatic

For the moment I consider that only one agent can be active. If multiple are detected, I raise an error. That is intentional to gather more context and feedback from users. I will change this behavior as soon as someone report me a use-case.

See the implementation at: https://github.com/kdeldycke/extra-platforms/blob/ecbe740bf7...

I did: https://github.com/kdeldycke/kevin-deldycke-blog/blob/main/c...

I have a project called Meta Package Manager that supports pURLs, so you can:

$ mpm install pkg:npm/left-pad@1.2.3

Other commands allows you to export the SBOM of all packages installed on your machine. More info at: https://github.com/kdeldycke/meta-package-manager

This is awesomely nice!

> My holy grail will still be landing on a good multi-layer configuration setup for Rust CLIs. Ideally CLI flags merged over top of environment variables merged over top of configuration files.

I did that for Python if you are interested: https://github.com/kdeldycke/click-extra

You create your CLI with Click as usual, then Click Extra introspects your "--parameters" to build up support for a corresponding configuration file in either TOML, YAML, JSON, INI or XML.

> When I decided to write a post on ledgers, I already knew there were a few good resources out there to help me.

One that's not referenced in this article and compile all of them is: https://github.com/kdeldycke/awesome-billing#readme

They can scrap my CSV at: https://github.com/kdeldycke/vat-rates

Just took a look - this is a good csv no doubt, but looks like you're focused on countries with VAT and not those with GST, sales tax, and consumption tax right?

Yes you're right. It is not complete and had plan to fix all that a couple of years ago but put it on the back-burner. I'm still happy to merge PRs upstream from motivated contributors! :)

I ‘m using https://stork-search.net for my static website search, but it’s no longer maintained. So yeah, Tantivy would be a great candidate to replace it! :)