patak
@patak.dev
📤 11924
📥 942
📝 4190
Open Source, Web, Dev Tools -
https://patak.dev
Helped build vite, vitest, elk, e18e
pinned post!
that makes no sense
10 months ago
5
145
6
More than 3GB added to English Wikipedia alone this year. Nearly 250k editors worldwide. The collaboration network Wikipedia fostered is such an incredible gift to the world.
add a skeleton here at some point
1 day ago
1
41
2
I think the next wave out of Twitter won't happen because of a generalized outrage event. This time it will slowly build up with each person that completely stops using it.
add a skeleton here at some point
1 day ago
1
21
0
Great they slow cooked masonry for so long, this looks so good. And defaulting item-tolerance to 1em is a very nice touch. .container { display: grid-lanes; grid-template-columns: repeat(auto-fill, minmax(250px, 1fr)); gap: 16px; }
add a skeleton here at some point
4 days ago
1
33
1
reposted by
patak
James
4 days ago
we released the new
@e18e.dev
ESLint plugin today! 🎉 this comes with 3 categories of rules: modernisation, performance, replacements it also works with oxlint and most of the rules have auto-fixes 🛠️ try it out and let us know any feedback/rule suggestions in discord/bsky/github!
loading . . .
GitHub - e18e/eslint-plugin: The official e18e ESLint plugin for code modernization and performance best practices
The official e18e ESLint plugin for code modernization and performance best practices - e18e/eslint-plugin
https://github.com/e18e/eslint-plugin
1
80
18
Threads' fediverse play is in maintenance mode. And Meta is testing a limit of 2 links per month in posts for some Facebook users, unless they pay a subscription. Eventually, the open web will prevail. Let's hope we don't need to live through a hundred more walled gardens to get there.
4 days ago
1
22
1
reposted by
patak
Firefox for Web Developers
4 days ago
HTML hidden=until-found and auto-opening <details> is newly baseline… or is it? Here's how it works, and issues to watch out for:
loading . . .
3
104
12
This talk crossed 200k views for a good reason. Highly recommended. Not only for desktop and not only for designers.
add a skeleton here at some point
7 days ago
2
22
0
reposted by
patak
Bjorn Lu
7 days ago
npm's broken UI bugged me enough I wrote a userscript to fix them, and added some features too. Repo:
github.com/bluwy/npm-us...
Here's a before-and-after comparison:
loading . . .
1
33
5
reposted by
patak
Philippe Serhal
7 days ago
Rather than reinventing countless wheels, Netlify and Cloudflare are now collaborating on framework detection and auto-configuration! Cloudflare engineers have been contributing to the open-source
www.npmjs.com/package/@net...
, which wrangler now leverages just like Netlify. 🤝
add a skeleton here at some point
1
14
5
reposted by
patak
Matt Kane
7 days ago
Big improvement to frameworks on Cloudflare! You can now deploy most frameworks from the CLI with zero config. No adding adapters. No editing configs. No wrangler.toml! It's all done automatically. Experimental now, with 10 frameworks supported today.
developers.cloudflare.com/changelog/20...
loading . . .
6
101
17
reposted by
patak
dan
7 days ago
RSC Explorer is now open source!
tangled.org/danabra.mov/...
loading . . .
danabra.mov/rscexplorer
A tool for people curious about the React Server Components protocol
https://tangled.org/danabra.mov/rscexplorer
3
97
13
reposted by
patak
pnpm
7 days ago
📦 Block Exotic Sub-dependencies Want to secure your dependency tree? Enable blockExoticSubdeps: true. This prevents transitive dependencies (deps of deps) from resolving "exotic" protocols like git+ssh: or direct https: tarballs. Keep the weird stuff out of your deep dependency graph. 🕵️♂️
1
16
2
reposted by
patak
Eurosky Social
8 days ago
Announcing
eurosky.social
accounts - launching January 2026. ✅ Managed by Eurosky, a European non-profit initiative ✅ Hosted on European cloud ✅ Governed by European law
www.eurosky.social/register
loading . . .
Register for a eurosky.social account - one web identity, dozens of apps — eurosky
https://www.eurosky.social/register
9
243
178
reposted by
patak
mary🐇
10 days ago
hi here's a Statusphere demo written using
atcute
,
Tap
, and
SvelteKit
tangled.org/mary.my.id/atc…
8
102
16
reposted by
patak
Bailey Townsend 🦀
11 days ago
Build your own ATProto Adventure! An atproto SvelteKit template. I needed a confidential oauth client, so I thought to abstract the start of the project to a template for anyone to use! I am hoping this will be one of the easiest ways for devs to start an atproto project w/ oauth
demo.atpoke.xyz
4
65
11
reposted by
patak
Joachim Viide
11 days ago
To recap, NPM allows 2FA TOTP token reuse within the token’s validity window. I reported this and was told it’s a “known low-risk issue” and that they “don’t consider this to present a significant security risk.” So, let’s look at how this seemingly small issue could be leveraged by a phisher. 1/
add a skeleton here at some point
3
23
13
reposted by
patak
Ricky
12 days ago
Please update (again) immediately.
add a skeleton here at some point
2
68
13
Good read.
@ntnsndr.in
interviews
@bnewbold.net
about the history of Bluesky from his perspective as a protocol engineer. A great deal of pragmatism and such a unique set of circumstances allowed the network to succeed as it did.
protocol.ecologies.info/interviews/n...
12 days ago
1
14
2
reposted by
patak
Thomas Steiner
12 days ago
Just published a polyfill for <input type="checkbox" switch>:
github.com/tomayac/inpu...
. Here's a quick demo:
tomayac.github.io/input-switch...
. A little proud of how this conditionally only loads when it's needed. Compare Chrome (above, needs the polyfill) and Safari (below, doesn't need it).
3
34
8
reposted by
patak
Patrick Brosset
13 days ago
The browser-compat-data project (used by MDN, caniuse, and tools) now has: 20,000 commits 1,123 contributors 465 releases 19,148 data entries That's what comprehensive web compat data looks like. And it takes well funded teams at
@openwebdocs.org
and
@mozilla.org
plus amazing contributors.
0
48
10
reposted by
patak
Chandler Carruth
14 days ago
Super exciting: Rust is no longer experimental in the Linux Kernel, it is here to stay!!!
lwn.net/Articles/104...
loading . . .
The end of the kernel Rust experiment
The topic of the Rust experiment was just discussed at the annual Maintainers Summit. The cons [...]
https://lwn.net/Articles/1049831/
1
69
11
reposted by
patak
Boshen
15 days ago
Announcing Oxlint Type-Aware Linting Alpha 🚀 ⚡ Fast via tsgo (TypeScript 7) 🔍 Type-checking while linting ⚙️ Rule configuration 🛑 Highly demanded no-deprecated rule
oxc.rs/blog/2025-1...
loading . . .
Type-Aware Linting Alpha
A collection of high-performance JavaScript tools written in Rust
https://oxc.rs/blog/2025-12-08-type-aware-alpha.html
2
83
4
reposted by
patak
Una Kravets
15 days ago
🎉 And we're live! 🎉 We just launched CSS Wrapped 2025: our annual recap of all things CSS & web UI that landed in Chrome over the course of the year. 🚀 This is a big one! We highlighted 22 new features to help you build better on the web. Check out:
chrome.dev/css-wrapped-2025
loading . . .
CSS Wrapped 2025
Sculpt dynamic interfaces, stretch your imagination, and play with these 22 powerful new CSS features that landed in Chrome this year.
https://chrome.dev/css-wrapped-2025
2
132
66
reposted by
patak
Joachim Viide
15 days ago
From the thread: "Attacks from bot compromised Next.js assets spiked on 2025-12-05 from the usual 100 IP baseline to close to a 1000." If you're not 100% sure you're NOT vulnerable, you should patch your Next.js apps ASAP. And if you're 100% sure... patch anyway.
add a skeleton here at some point
0
14
7
reposted by
patak
Vladimir
15 days ago
A new milestone!
@vitest.dev
hit 20 million mark 🎉 Took us 4 years since the first closed 0.0.0 release on December 3d, 2021 😄
6
115
12
this is nuts, non-dismissible full page message, social meta title swapped to CVE-2025-55182
add a skeleton here at some point
16 days ago
0
23
3
reposted by
patak
Matt Kane
18 days ago
The original React2shell PoC is now public. This is as bad as it gets – full RCE. You must upgrade now. There are mitigations in place in CDNs including Cloudflare, Netlify, Vercel and AWS (and sites on Workers aren't vulnerable to this sort of attack), but there are variants in the wild now.
loading . . .
GitHub - lachlan2k/React2Shell-CVE-2025-55182-original-poc: Original Proof-of-Concept's for React2Shell CVE-2025-55182
Original Proof-of-Concept's for React2Shell CVE-2025-55182 - lachlan2k/React2Shell-CVE-2025-55182-original-poc
https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc
3
66
24
The changed code is a small fraction of an open source contribution. Your commitment to understand the issue, how your proposed solution fits with the project, and be ready to own and push the review process forward is the biggest chunk of the work. Your effort is the contribution, not the code.
18 days ago
5
445
69
reposted by
patak
Titus 🇵🇸
19 days ago
Hello friends and welcome to a new “How is ESM vs CJS going!” 33.4% of the popular packages on npm now includes ESM. Up from 29.6% half a year ago. We have a third! ESM-only is up from 11.5% to 12.6%. This is also the impact of half a year of Node 18 being EOL, making `require(esm)` available
5
80
21
There Are So Many Things You Might Not Need A Library For Anymore These Days
add a skeleton here at some point
19 days ago
3
32
1
reposted by
patak
Emanuele (Ema)
19 days ago
It's merged! The next alpha/beta release
@astro.build
will support
@vite.dev
Environment APIs! It took a long time because we had to re-architect the whole rendering pipeline. With this, even the
@cloudflare.social
Vite Plugin will work out of the box!
1
73
10
reposted by
patak
Ryan Cavanaugh
20 days ago
> We're closing these issues logged on a codebase that is not being maintained. Please re-log them, if applicable, against the new codebase, which is a rewrite < How dare you?? You should manually check them all > That'd take hundreds of hours < Why not crowdsource it instead then > I just did?
0
28
2
rated CVSS 10.0, upgrade now if there isn't a mitigation in place by your server provider > An unauthenticated attacker could craft a malicious HTTP request to any Server Function endpoint that, when deserialized by React, achieves remote code execution on the server.
add a skeleton here at some point
20 days ago
3
23
6
reposted by
patak
Vite
20 days ago
⚡️ The first Vite 8.0 beta is here! - Powered by Rolldown, bringing significantly faster production builds and more consistency - New features such as tsconfig paths or emitDecoratorMetadata support - Bumping browser targets aligned with Baseline Widely Available Read more in
our announcement post
!
loading . . .
Vite 8 Beta: The Rolldown-powered Vite
The first beta of Vite 8, powered by Rolldown, is now available. Vite 8 ships significantly faster production builds and unlocks future improvement possibilities. Read more about the migration, new fe...
https://voidzero.dev/posts/announcing-vite-8-beta
1
218
51
Great post, interesting heuristics for "eagerness: moderate" on mobile: - Anchor links within 30% vertical distance from the previous pointer down. - Anchor links at least 0.5× as big as the largest anchor in the viewport. - The browser waits 500 milliseconds after the user stopped scrolling.
add a skeleton here at some point
21 days ago
0
13
2
reposted by
patak
nate moore
21 days ago
First blog post in 6 years, now powered by
@astro.build
. “Late to my own party” is very on brand 🙈 Here's a quick rundown of what I've been up to
loading . . .
Hello from the other side
One pandemic, two JavaScript frameworks, and a few career highlights later, here's a quick reflection on my past six years.
https://natemoo.re/posts/hello-from-the-other-side/
1
63
5
reposted by
patak
Nicolò Ribaudo
21 days ago
Strongly recommend searching for "bun" here on Bluesky and looking at the popular results to read all the comments about Anthropic buying the Bun js runtime
5
14
3
reposted by
patak
zeu
21 days ago
a javascript runtime
@bun.sh
has been acquired by the claude ai guys
loading . . .
Bun is joining Anthropic
Bun has been acquired by Anthropic. Anthropic is betting on Bun as the infrastructure powering Claude Code, Claude Agent SDK, and future AI coding products & tools.
https://bun.com/blog/bun-joins-anthropic
11
63
12
reposted by
patak
Jake Bailey
21 days ago
I'm sure many of you have already been trying out the native preview, but if you haven't, now is the best time to start!
add a skeleton here at some point
2
47
7
reposted by
patak
ekrof
21 days ago
Introducing VoxCSS: a DOM based voxel engine
github.com/LayoutitStud...
loading . . .
GitHub - LayoutitStudio/voxcss: A DOM based voxel engine. Renders HTML cuboids by stacking CSS grid layers and applying 3D transforms.
A DOM based voxel engine. Renders HTML cuboids by stacking CSS grid layers and applying 3D transforms. - LayoutitStudio/voxcss
https://github.com/LayoutitStudio/voxcss
0
7
3
reposted by
patak
Bjorn Lu
22 days ago
If you're tired of supporting tsconfigs too, I've wrote something.
github.com/bluwy/tsconf...
loading . . .
GitHub - bluwy/tsconfig-grimoire: A collection of sacred information to deal with tsconfig.json for tooling authors and maintainers
A collection of sacred information to deal with tsconfig.json for tooling authors and maintainers - bluwy/tsconfig-grimoire
https://github.com/bluwy/tsconfig-grimoire
1
39
10
reposted by
patak
Firefox for Web Developers
22 days ago
We have Custom Elements, but do we also need Custom Attributes? This was discussed at TPAC. Is it something you'd like on the platform?
https://github.com/WICG/webcomponents/issues/1029
loading . . .
19
105
30
reposted by
patak
Boshen
22 days ago
Announcing Oxfmt: Oxc Formatter Alpha
oxc.rs/blog/2025-1...
loading . . .
Oxfmt: Oxc Formatter Alpha
A collection of high-performance JavaScript tools written in Rust
https://oxc.rs/blog/2025-12-01-oxfmt-alpha.html
1
111
14
reposted by
patak
John Mueller
24 days ago
TIL Wikipedia moved to shared desktop/mobile website URL pattern, no more m-dot URLs. If you're curious about the behind-the-scenes work (site migrations! everybody's favorite, right?!):
www.mediawiki.org/wiki/Request...
www.mediawiki.org/wiki/Request...
techblog.wikimedia.org/2025/11/21/u...
loading . . .
Unifying our mobile and desktop domains – [[WM:TECHBLOG]]
https://techblog.wikimedia.org/2025/11/21/unifying-mobile-and-desktop-domains/
2
126
19
reposted by
patak
Keeley ❄️🎄
25 days ago
This is one of my favorite traditions that we do on Electron; it’s a great time to both recharge and get caught up on internal maintenance and projects that we might not normally have the time to look into
add a skeleton here at some point
1
31
5
reposted by
patak
Patrick Brosset
28 days ago
Mozilla, Microsoft, Google, Intel, Apple all came together to celebrate this great milestone: WebGPU is now supported in major browsers! Check out our post.
loading . . .
WebGPU is now supported in major browsers | Blog | web.dev
Read about the biggest web graphics launch since WebGL. WebGPU is supported across major browsers, bringing unparalleled performance to the web.
https://web.dev/blog/webgpu-supported-major-browsers
1
83
18
reposted by
patak
James
28 days ago
we've started tracking the ongoing and upcoming projects better on the e18e site hopefully this gives a better idea of the things we're building!
loading . . .
e18e
A list of ongoing and upcoming projects by the e18e community.
https://e18e.dev/learn/projects.html
1
30
9
reposted by
patak
Socket
29 days ago
🤯 The number of affected packages in the Shai-Hulud npm attack has now reached 770. We’re continuing to investigate and will keep the blog post updated:
socket.dev/blog/shai-hu...
add a skeleton here at some point
0
18
10
reposted by
patak
Ulises Gascón
30 days ago
✍️ Open source doesn’t fail because of code. It fails because of governance gaps, burnout, and invisible work. I wrote down what I learned working on
#Expressjs
and
#Lodash
blog.ulisesgascon.com/open-source-...
loading . . .
Open Source Doesn’t Fail Because of Code!
We like to blame code when open source breaks. The reality is uglier: governance, burnout and invisible work are the real fault lines. This reflects what I learned during our work on Express and Lodas...
https://blog.ulisesgascon.com/open-source-doesnt-fail-because-of-code
1
24
6
reposted by
patak
Marco Ippolito
30 days ago
Just published a new blog post. It’s about my experience shipping Node.js native TypeScript support. It’s not a technical blog post, it's about my perspective, what it felt like and what I learned along the way.
satanacchio.hashnode.dev/the-summer-i...
loading . . .
https://satanacchio.hashnode.dev/the-summer-i-shipped-type-stripping
2
20
5
Load more
feeds!
log in