Vimscript
guest@6admin.io:~$ ls ~/tags/vimscript
vim-plugin-manager: argument injection hidden in a .gitmodules
Sixteen months of hardening compressed into one story: a proven git argument injection hidden in .gitmodules branch names, a subprocess budget pinned in tests, detached plugins that stop lying as up-to-date and stale tag mirrors poisoning every update. The v1-to-v2.2.10 saga.
vim-plugin-manager: turning a decade of bash into a real Vim plugin
Seven years after the hand-rolled submodule script, the rewrite in VimScript: declarative PluginBegin blocks, parallel background installs, pinning re-asserted from the vimrc and lazy loading that deletes its own placeholders. Episode three of the vim series.