US policy change on SBOMs

News includes José Valim announcing another major compilation time improvement coming to Elixir v1.20 achieving 2x speedup while adding the type checker, a new alternative Erlang syntax called Telelang, Membrane's YOLO plugin bringing AI-powered object detection to video pipelines, Christian Alexander's Claude Skill for automating dependency updates through AI conversation, José Valim's experimental PR Quiz tool that transforms code reviews into interactive learning experiences inspired by Anthropic research on AI coding skills, legal changes to US SBOM requirements, AshPartition for database partitioning, building containers directly from Erlang/Elixir code, and the complete ElixirConf EU speaker lineup featuring 39 speakers plus keynotes from José Valim and Chris McCord!

Show Notes online - http://podcast.thinkingelixir.com/291

Elixir Community News

• https://paraxial.io/ – Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.
• https://x.com/josevalim/status/2017671777187438683 – José Valim shared another compilation time improvement coming to Elixir v1.20 RC. Livebook compilation time went from 6.4s to 3.2s over 3 years, achieving 2x improvement while adding the type checker. Much of this came from removing single core bottlenecks for better CPU utilization.
• https://telelang.org/ – Telelang - an alternative syntax for Erlang that compiles to Erlang code without changing semantics or standard library.
• https://github.com/fancycade/tele – GitHub repository for Tele. Marked as experimental and unstable, but demonstrates an interesting approach to creating a different syntax and parser without deeper changes.
• https://x.com/swmansionelixir/status/2018345705614549274 – Announcement of Membrane YOLO Plugin for AI-powered object detection in Elixir multimedia pipelines.
• https://www.reddit.com/r/elixir/comments/1quo8ym/membrane_yolo_plugin_aipowered_object_detection/ – Reddit discussion about the Membrane YOLO Plugin.
• https://github.com/membraneframework/membrane_yolo_plugin – Membrane YOLO Plugin repository showing real-time object detection in video streams using Nx models directly within Membrane pipelines.
• https://github.com/intility/erlang-oci-builder – Build containers directly from Erlang/Elixir codebase - essentially a code-driven Dockerfile declaration with registry push support.
• https://hexdocs.pm/oci – Massdriver's OCI library providing a Plug for accepting Docker Registry's HTTP API.
• https://gist.github.com/ChristianAlexander/838100a7a34d26c43bd829fad17c4e5d – Christian Alexander's Claude Skill for updating Elixir dependencies, describing a workflow for handling updates and breaking changes through AI conversation.
• https://x.com/rootcert/status/2016889334939734033 – Christian Alexander's tweet about the dependency update skill, describing how it changed the update cycle from painful to conversational.
• https://diff.hex.pm/ – Hex package diff tool, suggested as addition for security review of dependency upgrades.
• https://x.com/zachsdaniel1/status/2018350155905347807 – Announcement of AshPartition, a new Ash-related package for managing partitions.
• https://hexdocs.pm/ash_postgres_partition/dsl-ashpostgrespartition.html – Documentation for AshPartition DSL.
• https://github.com/m0rt3nlund/ash_postgres_partition – AshPartition GitHub repository - a community contributed helper library for adding partitions in Ash using AshPostgres with tenant support.
• https://www.securityweek.com/white-house-scraps-burdensome-software-security-rules/ – White House rescinds Biden-era software security guidance including SBOM requirements, shifting responsibility to individual agencies. However, SBOMs expected to continue due to European initiatives.
• https://yro.slashdot.org/story/26/01/30/2041200/white-house-scraps-burdensome-software-security-rules – Slashdot coverage of the software security rules change.
• https://x.com/josevalim/status/2018350969545736254 – José Valim shares a vibe-coded MCP App built over the weekend that turns pull request reviews into interactive learning experiences inside Claude Desktop.
• https://github.com/tidewave-ai/pr-quiz – PR Quiz open source project - turns pull request reviews into interactive learning experiences with a 7:25 minute demo video.
• https://www.anthropic.com/research/AI-assistance-coding-skills – Anthropic research on "How AI assistance impacts the formation of coding skills" showing junior developers who fully relied on AI learned less. Emphasizes that cognitive effort and getting stuck is important for mastery.
• https://www.elixirconf.eu/#keynotes – ElixirConf EU speaker list is complete with 39 speakers plus keynotes from José Valim and Chris McCord. Conference in Málaga, Spain (and virtual) on April 23-24. In-person tickets €539 (early bird), virtual €129.

Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at show@thinkingelixir.com

Find us online

• Message the show - Bluesky
• Message the show - X
• Message the show on Fediverse - @ThinkingElixir@genserver.social
• Email the show - show@thinkingelixir.com
• Mark Ericksen on X - @brainlid
• Mark Ericksen on Bluesky - @brainlid.bsky.social
• Mark Ericksen on Fediverse - @brainlid@genserver.social
• David Bernheisel on Bluesky - @david.bernheisel.com
• David Bernheisel on Fediverse - @dbern@genserver.social

Sponsored By:

• Paraxial.io: Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.