hex.pm is deprecating basic authentication on the API: hex.pm/blog/deprecating-basi…

Hex v2.5 adds three layers of supply chain defense: security advisories in your terminal on mix deps.get, a release-age cooldown that withholds new versions until they’ve aged, and organization policies for filtered dependency fetching. hex.pm/blog/hex-v25-released

New HexDocs URLs: per-package subdomains hex.pm/blog/hexdocs-per-pack…

🔒 The EEF, in collaboration with Alpha Omega, has completed the first comprehensive third-party security audit of the @hexpm. This work is part of the ongoing efforts to strengthen security across the BEAM ecosystem under the Ægis initiative. erlef.org/blog/eef/hex-secur…

Securing @hexpm 🔐 Over the past months, a dedicated team conducted the first comprehensive third-party security audit of Hex.pm and its surrounding ecosystem. This work was made possible by @AlphaOmegaOSS, an initiative under OpenSSF that funds security improvements for critical open source projects, and was carried out as part of the Erlang Ecosystem Foundation’s Ægis initiative. 👉 hex.pm/blog/security-audit

Woot! hex.pm will now serve llms.txt for Elixir/Erlang packages if the accept header is text/markdown. If you have a package and you use ExDoc, update to the latest version (which generates .md files by default) and republish your docs.

We just published the results of the Hex security audit hex.pm/blog/security-audit. Thanks to @AlphaOmegaOSS for funding this work, and to @paraxialio and @zentrustsec for the thorough reviews. Finally big thanks to @maennchen_ for managing this effort.

Hex v2.4 released with support for OAuth device flow and improved 2FA checks. hex.pm/blog/hex-v24-released

Hexdocs now offers @TypeSense-powered documentation search across all packages and versions, link below. TL;DR: * Run `mix hexdocs.search` to open a search tailored to your project's dependencies * Coding agents can use tidewave.ai's MCP to search across your deps docs * Docs for Phoenix/Ecto/etc can provide cross-dependency search, improving onboarding

Fastly has supported Hex with free services for almost 10 years and is what makes mix deps.get so fast for Hex packages. Now @fastly is making their platform available to all developers for free. Check out: fastly.com/pricing

Our next Keynote Speaker spotlight for Code BEAM Europe 2024 is Wojtek Mach 🇪🇺 Wojtek is going to be presenting a deep dive into the major milestones in Hex’s development and ecosystem and see what we can learn from them! 💡 Don't miss out: codebeameurope.com/ #CodeBEAM

We are moving repo.hex.pm/builds to a new domain builds.hex.pm/builds. See the post for the details and migration schedule. hex.pm/blog/new-domain-for-b…

The Elixir and Erlang docker images the Hex team provides are not affected by the upcoming Free Team changes Docker is making and will continue working after April 13. hub.docker.com/u/hexpm

Hex 2.0 released with a new version solver hex.pm/blog/hex-v2.0-release…

Hex v1.0 released and the future of Hex backwards compatibility. hex.pm/blog/hex-v1.0-release…

Just reported a bug in hex.pm, and it took them a few minutes to respond, fix and deploy.. on a Saturday!! Huge kudos to @emjii! There is a reason why we love the Elixir community so much.💙 #ElixirLang #HexPM #myelixirstatus

OMG it worked! Gleam can publish @hexpm packages! hex.pm/packages/first_gleam_…

A new version of Hex has been released that should fix the recent issues with version downgrades and slow version resolutions. Run `mix local.hex` to upgrade.