Mine took down all iOS streaming on Netflix. A year later my former team had rolled out a whole new system in place of the thing that allowed my missed where clause to cause the outage. Good engineering is not about mistakes happening, it is about how you respond after.

"We’re sending a quick reminder to complete our survey about your Technology Help Center (THC) usage." Well....**takes a big puff**...lets do this survey.

Someone at PayPal needs to learn about the importance of alt text. Hope they like immediate delete on their emails.

40 million users on halloween [takes a long drag on a cigarette] no way one of them isn’t a dracula

New collab space alert 👀🚨 We've launched the Bundler Collaboration Space to bring projects like Vite, Webpack, Rspack, and others together on shared goals for the JavaScript bundler ecosystem. Join in: github.com/openjs-found...

I am so happy! Getting back home to Austin and it’s actually chilly. All I wanted to do was go curl up in bed and sleep for a month, and I got the type of weather that makes that feel nice.

I will personally give a free ticket to the next GitHub Universe to the first person to share a UF2 with a playable version of Doom for the GitHub Universe 2025 badge

The line to get into @github.com Universe looked like a 4 hour wait to get o to a roller coaster. Lucky for me I was here yesterday but still got the bacon.

The word “agents” is a new trigger word for me. 🫠

Back on PT and despite getting in late, my body thinks it’s time to be awake again. Sure doesn’t look like morning out there yet body.

I have been traveling too much this month, but it has its perks.

If you think npm's architecture is good, go watch @darcyclarke.me's talk. The dependency graph is complex and @vlt.sh is reinventing it in a smart and unique way. www.youtube.com/watch?v=o8nG...

Picking up a hotdog from a local food truck, only to find three other whole food trucks, including their own reasonably tasty looking hot dogs, stuffed inside your hot dog. I love JavaScript, I swear 🤣

When I see a new Wesley posting about something cool in tech I always follow them, because anyone named Wes has to be doing cool stuff. Them’s the rules. Hey @wesleyfinck.org 👋

Huge thanks to the @vlt.sh team for building something new and refreshing in the world of package managers and taunting me with LEGO to try it out. Join me and check them out: www.vlt.sh

Any friends at Google know how to help make this happen?

@jsconf.bsky.social was awesome and the @nodejs.org collab summit was crazy productive. But now I am tired and need to sleep and process all the conversations we had. 😴

My friend @brianmuenzenmeyer.com wrote a book about the world of open source! Take a sec and check it out: approachableopensource.com

For those at @jsconf.bsky.social this week, you can find a bunch of us on this list @patrickheneise.com put together! bsky.app/profile/did:...

Crashed @angular.dev conf kareoke tonight

My @jsconf.bsky.social talk is in 30min and I just decided to not use the slides I had prepared. Wish me luck.

Cloudy morning but I can’t complain about the room view, that’s for sure.

Well guess all the announcements from GitHub are well timed for my talk on Thursday.

👋🏻 If you're at @jsconf.bsky.social NA this week, come say hi to our team @vlt.sh ⚡📦 @ruyadorno.com, @lukekarrys.com & our Design Engineer (Jason Korol) will be there for both the conf & Node.js Collab Summit 🚀🐢

⚡️ All set up for #JSConf ! Stop by to talk with the @vlt.sh team if you’re around!

JS Conf tomorrow!

It has been really *fun* (as in not fun at all) to be prepping for this npm publishing session/talk. So many wat moments in the website UI.

This is a "goal", and one I have believed in from the early days. That said, I don't think that goal has been achieved *yet*. I am glad to see that the folks working at @bsky.app *believe in this goal*. I just wish there was a way to communicate this goal that was widely accepted.

Other than the trusted publishing stuff (which is absolutely not ready for use yet, I will be outlining why in my JS Conf talk) this is a great write up of the recent goings on.

IDK why but I got the urge to play dwarf fortress. I was thinking maybe I would only bring my mac on my work trip next week, and sadly I learned they decided not to do the mac port. And whiskey is EOL, leaving only crossover. And I am just not sure I justify spending $74 on this fleeting urge

🚨 Open source supply chain attacks are exploding. Starting today, that ends. We’re releasing Socket Firewall — FREE, zero-config, CLI that blocks malware before it lands on your laptop or CI. Just run: npm i -g sfw sfw npm install lodash Works for: npm, yarn, pnpm, pip, uv, and cargo.

Did some sort of aerobic yoga class this morning. I swear if I could go back 10 years and just start doing something like this regularly I would be a whole different person 🤣

I hate computers in a way only someone who loves computers can.

@kochan.io Does @pnpm.io have any policies on support/stability for the packages like github.com/pnpm/pnpm/tr...? I can't find any, and I am hoping to put together some tooling that would benefit from not having to shell out to do things like this.

Sat next to him on a flight last year. He sat in the middle seat like it was the most normal thing. Didn’t even do a kick flip.

NPM: use Trusted Publishing Also NPM: Trusted Publishing does not work with dist-tag updates

A heads up to anyone attending the upcoming JSConf in October and locals to the Maryland state area. We're hosting the Node.js Collab Summit next October 17 and registration is now open for in-person participation: github.com/openjs-found...

So much for a relaxing conference week as an attendee 🤣 jsconf2025.sched.com/event/29LEx

🚨 New twist in the npm malware wars: Socket just uncovered a malicious package, fezbox, that hides its payload inside a QR code image. Yes, you read that right. JavaScript malware using QR code steganography to steal browser cookies & passwords ⬇️ Technical detail below socket.dev/blog/malicio...

Had a SUPER fun conversation on @LogRocket about the huge npm supply chain attacks we've seen over the past 2 months I walked through the whole sorry saga from beginning to end. Don't miss it!

Welcome @rafaelgss.dev to the @openjsf.org #CNA team! 👏 👏 👏 github.com/openjs-found...

This got me thinking. I have been trying out this pattern of doing a `setup` script in projects. The idea being to run `node --run setup` when you clone down a project, and that script does your package manager install. It is working great for me so far, and almost fully replaces what corepack did.

Be a help, not a hindrance. I have been both at times (well I like to think I have been a help sometimes) and agree: most of the time you *shouldn't* write a new lib. Especially if there is an option to solve the problem with "a methodology".

Anyone else miss whiteboards as much as I do? No? Just me?

Seeing the recent supply-chain attacks made me prioritize this item from our backlog as I wanted a quick way to know if any of my local projects have been affected. Meet the new vlt client `:host()` Query selector: blog.vlt.sh/blog/host-co... #javascript #nodejs #packages

Welcome @bjohansebas.bsky.social to the @expressjs.bsky.social Security Triage team! 👏 👏 👏 github.com/expressjs/se...

Our goal is to provide guidance and tooling for perf based decisions to the maintainers under our umbrella. Aligning our philosophy for how/what we monitor and how to interpret the results lets us be consistent across our 50+ packages. Ive been learning a lot so far, and big ty to @rafaelgss.dev

I've published my perspective of the @ctrl/tinycolor NPM supply chain attack. This whole thing got me to finally make a blog. sigh.dev/posts/ctrl-t...

Lots of GREAT progress and discussion on our @expressjs.bsky.social Performance Working Group. Thanks everyone who is participating as I think this is the second most (security comes first) impactful thing we could be working on. For anyone interested in helping out: github.com/expressjs/pe...