Sam Collins's WeblogA disorderly collection of shared notes. Words by human; code by clanker.https://samcollins.blog/Defending against npm attacks is hardhttps://samcollins.blog/ssca/https://samcollins.blog/mtmP8EHANNcENLom8nx6EtH5Supply-chain attacks are rising. Blocking fresh package installs sounds simple, but enforcing it across npm, pnpm, curl, GitHub etc. is the hard part.Fri, 15 May 2026 00:00:00 GMTSam CollinsCode & AIUsing “underdrawings” for accurate text and numbershttps://samcollins.blog/underdrawings/https://samcollins.blog/mpBwgXS4eDglOEYWLp7EaG0SA technique for accurate text and numbers in AI-generated images: generate the layout deterministically, then ask the image model to paint on top.Thu, 30 Apr 2026 00:00:00 GMTSam CollinsCode & AITalking with my bookshttps://samcollins.blog/talking-books/https://samcollins.blog/modQFqJsXJsmygCMHfhmIg8WHow to use Claude Code as a tutor for a specific book by importing the full text via @file — and the context-window tradeoffs that come with it.Mon, 16 Mar 2026 00:00:00 GMTSam CollinsCode & AIMulti-State Checkboxeshttps://samcollins.blog/checkboxes/https://samcollins.blog/m2romyfSdPkoK4KQbv3mACncAn expanded markdown checkbox syntax for tasks with more than two states, designed to render cleanly in Obsidian without plugins.Tue, 16 Dec 2025 00:00:00 GMTSam CollinsArbitrary MusingsUsing caps lock for voice transcription (macOS)https://samcollins.blog/caps-lock/https://samcollins.blog/mnP2fj61V77HvOCrHVI5SkNXThree bash commands to remap Caps Lock as a hotkey on macOS — for triggering voice transcription apps that don't support it natively.Mon, 15 Dec 2025 00:00:00 GMTSam CollinsCode & AIBicycle for the Mindhttps://samcollins.blog/bicycle/https://samcollins.blog/mNcHslVVh1yH232lrZQZ6IOn the bicycle for the mind metaphor and what the 1973 Scientific American chart showed meTue, 19 Aug 2025 00:00:00 GMTSam CollinsArbitrary Musings