Open source isn't just software, it's the community around the software. You can't vibe code that other part

Replay has always been, and continues to be, pure magic.

If you're European, you now have a great and well-funded PDS in EU soil, governed by EU laws, run by awesome folks. Moving your account to Eurosky is easy, and you won't notice the difference afterwards. Please take a few minutes and do the jump 🇪🇺

Hello @eurosky.social

Hey @en-js.bsky.social, I know you're all working on the rust version, and that's great - but are there any plans to release another stable of the babel plugin? From what I see in the playground, it has advanced a lot since 1.0. I would love to use that, but can't justify using the canary.

I'm working on a feature called package maps for Node.js - it's leveraging everything I learned about package resolution these past six years, in a design that's both simple and flexible enough to be backward compatible with existing installs. I'm very excited about this! github.com/nodejs/node/...

If you already have a GraphQL API, you’re closer to AI agents than you think. Apollo MCP Server exposes your existing operations as MCP tools — with schema validation, protocol translation, and secure execution built in. No backend changes required. https://apollographql.pulse.ly/2r6ufpirne

I can't remember when I last noped out of something that fast.

Something I brewed up over the weekend: ``` npx skills@latest add reduxjs/redux-toolkit ``` Have fun with those skills :)

Apollo GraphQL is joining the @aaif.io as a Silver member. The infrastructure for agentic AI should be open. We’re in. https://apollographql.pulse.ly/y5tbwajp9h #MCP #AgenticAI #AAIF #GraphQL #OpenStandards

JavaScript—making regular expressions easier to read: const RE_API_SIGNATURE = new RegExp( String.raw` ^ (?<prefix> new \x20 | get \x20 )? (?<name> [ A-Z a-z 0-9 _ . \[ \] ]+ ) `.replaceAll(/\s+/g, ''), 'v' ); exploringjs.com/js/book/ch_r...

Incredibly hyped to announce Schema Benchmarks, a project I've been steadily working on in collaboration with @fabianhiller.com! It aims to provide a central and transparent resource for many of the metrics that matter for schemas, including bundle size and runtime performance 😄

TypeScript type of the day ``` export type LazyType<T> = T & { [K in "" as never]: LazyType<never> }; ```

TypeScript doesn't have "Render Types" (unlike Flow, more opinionated toward JSX) This plugin proposes to implement render types constraints as an ESLint plugin Cool idea 👌 This could improve type-safety and prevent many React composition mistakes

I've put a lot of work into that apollo-client skill. It contains our latest recommendations on best practices - so if you want to tune out 10 years of outdated blog articles that went into AI training data, add this skill :)

I really applaud the work on @npmx.dev, but I just tried the page, and I find it to be extremely overstimulating. It's a *lot* of information on the page at once, and there's no clear distinction between what is "npmx" and "package readme". Hidden buttons and functionality are everywhere.

🚀 Lazy Barrel Optimization in Rolldown Barrel files, files that re-export from other modules, are common in modern JavaScript projects but a nightmare for your build time. Rolldown now has Lazy Barrel Optimization to fix this. Here's how it works 🧵

TypeScript excitement 😉 Congrats to @jakebailey.dev on updating upstream tsc to default to an unpinned *latest* yearly edition of ES20xx. Heading for TS 6.0 🎉 This mean less transpilation of new JS features & more use of native language features provided by JS engines 👍 github.com/microsoft/Ty...

Real-world results from using response caching in Apollo GraphOS Router 👇 Faster responses. Less subgraph traffic. Read More: https://apollographql.pulse.ly/9fibh5u8ab

Apollo Client 4.1 is out, go and stream all the things!

Spending the day closing PRs to bump "vulnerable dependencies" from `^2.1.1` to `^2.1.2` . It's a bit of a shame that security scanners highlight vulnerable packages, but don't explain that you can just bump transitive dependencies without the need to update dependents.

I created a middleware called redux-storage-middleware github.com/laststance/r... because redux-persist hadn’t been maintained for a long time. Internally, it’s inspired by atomWithStorage from Jotai. (Big thanks to @dai_shi!)

🥳 TypeSlayer is out! celebrate by posting what your type graph looks like! it legit has an actual leaderboard now: so bonus points if you win lol 🏆🏆 run: `npx typeslayer` source: github.com/dimitropoulo...

flint.fyi ❤️‍🔥

Check out how we've been experimenting building ChatGPT apps using Apollo MCP Server and Apollo Client. https://apollographql.pulse.ly/n564sxjexh Let us know what you think ⬇️ #MCP #AgenticAi #ChatGPT #OpenAI #GraphQL #AI #DevTools

Watching Claude trying to set up Jest 30 and JSDOM 27 is heartbreaking.

Hey @augmentcode.com, your free Open Source plan page at augmentcode.com/opensource seems to be non-existent. Is that on purpose? It's still linked to at www.augmentcode.com/blog/augment...

🚨Standard JSON Schema v1 just dropped🚨 🟢libraries can now accept ArkType wherever they need JSON Schema 🟢100% type-safe with inference built-in 🟢day one support from AI SDK 🟢TanStack AI and MCP SDK support imminent

It should be way more normal to talk about this stuff. Thank you Corbin. Also, make sure to read the full series, playfulprogramming.com/collections/...

To recap, NPM allows 2FA TOTP token reuse within the token’s validity window. I reported this and was told it’s a “known low-risk issue” and that they “don’t consider this to present a significant security risk.” So, let’s look at how this seemingly small issue could be leveraged by a phisher. 1/

⚔️introducing TypeSlayer⚔️ A #typescript type performance benchmarking and analysis tool. A summation of everything learned from the benchmarking required to make the Doom project happen. It's got MCP support, Perfetto, Speedscope, Treemap, duplicate package detection, and more.

TypeScript excitement 😉 The infamous Dimitri is cooking up a slick type analysis tool called TypeSlayer 🔥 "If you have a large enough project, there are performance problems where you can shave 100 seconds off CI by making a 5 line change. The problem is knowing out where to make that change."

Come to the API standards booth at apidays Paris, we have stroopwafels!

5 years ago today, I got an email that would change my professional life forever. I obviously didn't know it at that time. But this is when it all started...

The original React2shell PoC is now public. This is as bad as it gets – full RCE. You must upgrade now. There are mitigations in place in CDNs including Cloudflare, Netlify, Vercel and AWS (and sites on Workers aren't vulnerable to this sort of attack), but there are variants in the wild now.

📣 TanStack AI Alpha is here! ✨ Framework agnostic 🤖 Provider agnostic 🧠 Type safe 🔧 Isomorphic tools 🛠 Devtools 🌐 Open protocol 📦 JS, Python, PHP ⚛️ React, Solid, Vanilla 🌀 OpenAI, Anthropic, Gemini, Ollama, ++ Official blog post: tanstack.com/blog/tanstac... Docs: tanstack.com/ai

The @apollographql.com team will be at #apidays Paris 🥐 in just a few days. Come say hi and discuss all the #GraphQL things 👋 www.apidays.global/events/paris

For anyone that missed it, the React Server Components critical vulnerability has a name and website now Please refer to this before sharing any supposed POCs react2shell.com

There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it. A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately. react.dev/blog/2025/12...

Gotta say something positive about generative AI here: Navigating a foreign country, ChatGPT is enormously helpful. Of course I have no idea what is a hallucination or not, but given that I would have to wildly guess anyways, it leaves me with lots of more educated guesses.

Petition in Germany recognizing open source as volunteering for the common good 🤩 Seems like a good step towards recognition and a healthier open source ecosystem www.openpetition.de/petition/onl...

_Very_ excited to announce that @mweststrate.bsky.social just published Immer 11.0 with the major architectural rewrite I did to improve perf! 10.2 already had several smaller tweaks, and there's one more PR up to add optional array overrides: github.com/immerjs/imme... New RTK release soon!

Just filed a React-Redux issue with plans to officially mark the old `connect` API as deprecated soon: github.com/reduxjs/reac... Per the issue: I do _not_ intend to remove `connect`! Same deal as `createStore` - we don't think you should use it directly today, but it'd be a visual warning only.

New on the blog: I learned that Node.js includes a native method for marking other methods as deprecated. 🎉 www.stefanjudis.com/today-i-lear...

❌ If you unit-test a React 19 app, there’s a good chance a chunk of your CI time is being wasted on… 😴 setTimeout. Wait, what? Yes! React 19 introduced a minimum delay for showing a Suspense fallback, and hardcoded (!) it to 300ms. Just 3 tests can waste almost 1 second on absolutely nothing!

Not a trick, just a treat! 🍭 GraphQL Summit 2025 sessions are live! 🎉 Catch up on new ideas or the sessions you missed 👉 https://youtube.pulse.ly/5ucsxwzia1

add to the list of reasons to never accept homework in hiring pipelines 📝 (on a more serious note, HOLY S*** this is actually a surprising approach to try and hack someone - and with AI all around... YIKES) ...and perfectly spoOOoky 👻 for today 👻 🔗 blog.daviddodda.com/how-i-almos...

You’re using GraphQL fragments wrong. They’re not for reuse, they’re for co-location. Here’s what Meta learned refining this idea 👇🏼 youtube.com/watch?v=gMCh...

Oh great, now the person that reported "enabled directory listings" on my "only public static HTML files" homepage expects a bug bounty 🤦

There is nothing more frustrating than opening a GitHub issue with lots of detail, only for an AI to respond to me, repeating everything agree that this is a bug that needs to be fixed and asking me if it can close the issue now.