Last August, 2025 I had the privilege of being hit by the first known supply chain attack in history to leverage a local AI agent on the systems it compromised. All I had to do to be hit by this attack was restart my VS Code editor within a 5 hour window. There are a few decent write ups of this …

This is an update for everyone on how I’m thinking about and prioritizing work on this library so you may make decisions about continuing to use it based on more than nothing. The first version of django-polymorphic was released 15 years ago in 2011. There are many users of this library and it runs …