Series
Deps
What Did I Just Install — the stories behind the packages we all depend on.
Every project starts with an install command, and nobody stops to ask who made the things that scroll past. One package (or a small cluster) per episode: the human story behind it, what it does in plain language, and what it says about how open source actually works, and barely holds together.
Season 1 · What Did I Just Install
Nine packages, nine stories.
9 episodes · 5h 3m
From left-pad's eleven lines to Redis: maintainers who burned out, licenses that changed, and the strangers in your dependency tree.
On March 15, 2016, Facebook, Netflix, and Spotify's deployment pipelines crashed simultaneously—none had pushed code, all hit the same error: a missing eleven-line function called left-pad deleted by one developer in San Francisco.
Kenneth Reitz was 22 when he documented a Python library that didn't exist yet—one line to make an HTTP request instead of fifteen lines of machinery—launching the most downloaded package in Python history.
On February 27, 2016, the sole maintainer of JavaScript's most popular web framework posted four sentences and walked away, leaving millions of developers' projects orphaned for a decade.
Alex Clark brought a dead library back to life in 2010—now Pillow processes images in nearly every Python application you use, from photobooths to machine learning pipelines.
Daniel Stenberg has maintained curl for 28 years from a Swedish suburb, and it now runs on over 20 billion devices—yet most people have no idea they're using it every single day.
One trillion SQLite databases are running right now—on your phone, laptop, browser, and smartwatch—all maintained by a single man in Charlotte, North Carolina who's never taken venture capital.
Rich Harris, a philosophy graduate turned financial reporter, built Svelte in 2016 to ship lean JavaScript instead of bloated frameworks—the compiler disappears after transforming your code, leaving users with zero runtime overhead.
On February 18th, 2021, NASA's Perseverance rover sent back images from Mars—compressed by ffmpeg, software now running on 20 billion devices worldwide, mostly maintained by one unpaid developer.
On March 20, 2024, Redis Inc. relicensed the world's most critical in-memory database—and eight days later, Amazon, Google, and Oracle forked it.
Season 2 · The Invention of Trust
Who invented the install command?
14 of 22 out · 7h 52m
Opens with the history of package management itself, then mixes standard, deep-dive and epic episodes: Homebrew to OpenSSL, Docker to PyTorch, SSH to Nix.
In 1988, Jarkko Hietaniemi solved a Usenet problem that would eventually lead to billions of strangers trusting billions of other strangers to run code on their computers—without reading it first.
Max Howell built software used by 90% of Google's engineers, but the company rejected him for failing a whiteboard coding test—sparking a debate about what tech hiring actually measures.
Sebastián Ramírez in Berlin, Tom Christie in Brighton, and Samuel Colvin in London never worked together—yet their three separate packages fit into FastAPI like a single system that powers startups and data teams worldwide.
Leonard Richardson built a library that turns broken HTML into poetry—two hundred million downloads a month, maintained alone for twenty years by a programmer who started coding at eight years old.
On April 7, 2014, a bleeding heart logo revealed that 17% of the internet's secure servers had been silently leaking passwords, encryption keys, and credit card numbers through a bug in OpenSSL—and anyone could steal them with just a few lines of code.
A 19-year-old Austrian programmer made a pun about Japanese temples and template syntax—now that joke runs inside 11 billion downloads of Jinja2, powering Ansible, Django, and half the Python web.
Solomon Hykes gave a five-minute demo at PyCon 2013 that would redirect billions of dollars in venture capital and remake how software deploys worldwide.
In February 2026, tqdm gets downloaded over 300 million times per month—all for showing you a progress bar that costs just 60 nanoseconds per iteration, the time it takes light to travel 18 meters.
In 2017, a PhD student's simple image classifier required 140 lines of code and cryptic error messages about nodes called "dense/kernel:0"—TensorFlow's graph-based philosophy clashing with how humans actually think.
Andrew Tridgell's 1996 algorithm still syncs the world—until January 2025, when Google found critical vulnerabilities in rsync servers protecting 660,000+ machines, forcing its creator back after two decades to sign the security fix himself.
A grad student stuck for three years switched frameworks and graduated in three months—the emotional encounter that showed Soumith Chintala why PyTorch would reshape machine learning.
A packet sniffer in 1995 Finland captured thousands of unencrypted passwords—until one angry researcher named Tatu Ylonen built SSH to lock down the entire internet.
Inside /nix/store, 32-character hashes guard frozen software that can never break another package—Eelco Dolstra's radical bet that computers should only be in states you explicitly asked for.
Mike Bayer built SQLAlchemy on a radical bet: developers can handle the truth about their databases, not hide from it—and twenty years later, it's still outlasting every competitor that promised to make SQL disappear.