Published onOctober 2, 2026Maintaining wait-on at agent speed: AI, npm supply-chain risk, and a Rust enginewait-onopen-sourceai-agentscompound-engineeringoverdrivenpmsupply-chainrustMy first week as a wait-on maintainer, how coding agents shipped 27 PRs, six releases and a Rust engine behind the same API, and the guardrails that make that speed safe for a package downloaded 12 million times a week.