Hopefully this has built in support for second sourcing

> The 2025 egg price crisis was a cascading failure equivalent to a left-pad incident, except it affected breakfast.

They better load the SBOM correctly in SAP.

> AGPL (Affero General Pickle License): Same as GPL, but if you serve the sandwich over a network (delivery apps), you must also publish the recipe. This is why most restaurants avoid AGPL pickles.

I love a good APGL joke, and this one especially tickles me because I'm currently a delivery driver instead of a dev.

Finally, something the software industry can learn from: sandwiches have dependency management figured out.

love it - is this a thing that's mostly used in government contracting, or do people encounter SBOM stuff more broadly than that?

The most delightful thing I've read in a while.

> SHA-256 hash of the ingredient at time of acquisition

I put mayonnaise on my RAM but I don't know how to hash it.

Mmmmmh, specifications

What's the purl (Package URL) equivalent of surl:mystery, for stuff like Claude Code, which now only supports running a script to install? It does have a pretty easy to read install script, but the docs don't suggest reading it before running it as an option, they just say to run it https://code.claude.com/docs/en/setup

Also it doesn't address mold: harmful on bread, wonderful when intentionally added to cheese

Edit: Claude Code has a homebrew cask, and homebrew supports Linux (I haven't been using it on Linux so it didn't occur to me when reading this). It can be specified in purl using pkg:brew.