🚨 Breaking: npm author Qix compromised. Malicious package versions published in projects that typically see hundreds of millions of downloads each week. Details: socket.dev/blog/npm-aut...

High downloads and good reviews don't guarantee safety. All of these "popular" extensions are actually malicious and have fake stats.

You have asked me this a lot, so here it is! Announcing the Pinia Store 🎉 pinia.store

Released Actions Up for interactive GitHub Actions updates. 🔼 It replaces floating version tags with commit SHAs for better security. Scans all workflows, shows outdated actions, lets you choose what to update, and adds version comments for readability. github.com/azat-io/acti...

VitePress v2-alpha now supports @algolia.com's DocSearch v4 - including the new "Ask AI" feature! ✨ Try it out: - vitepress.dev/reference/de... - docsearch.algolia.com/docs/v4/askai And a big congrats to Algolia on 10 years of DocSearch! 🎉

A phishing attack is going on against maintainers on @npmjs.bsky.social, be aware! - email is spoofed from npmjs.org (which doesn’t use DMARC but redirects to npmjs.com) - login link points to npnjs(dot)com (clear giveaway)

Something happened today at VueConf China! github.com/vuejs/core/r...

Announcing RuleKit, my personal rules for AI agents, specific for Vue Apps Pay once, access forever the GitHub repo and the Discord server rulekit.dev

github.com/openai/codex is quite great! I was trying to create a fork of dprint-plugin-markdown to support vitepress/vuepress-style vue in markdown formatting, and it created almost all the stuff needed. There are 4-5 known edge cases left, then it will be good to use. github.com/brc-dd/dprin...

Does anyone why is there banding when using certain modern colors on Chrome? I'm on mac and it only happens on Chrome/Chromium-based browsers. Firefox and safari render it fine. The only related thing I could see was stackoverflow.com/q/78455453/1...

🔥

💖 These two months, January and February, we have forwarded our Open Collective fund to support maintainers: @sxzz.dev @johnsoncodehk.bsky.social @brc-dd.dev; Recurring to projects: @esm.sh @pnpm.io @cyberalien.dev Join us to show appreciation to our dependencies and help them be sustainable!

Huge thanks to StackBlitz for their generous support in the latest wave of sponsors! I'm truly grateful for their commitment to the Vite ecosystem and open-source sustainability. And a big shoutout for the recent Expo x Bolt integration! 🚀💙

🎁 A surprise holidays gift: after over a year of hard work, we have just published Rolldown 1.0.0-beta.1!

Vite 6.0 is out ⚡️ vite.dev/blog/announc...

New in VitePress - Now you can easily add links to any platform using icons from Simple Icons via Iconify. And yeah Bluesky works too! Also, it'll only add icons you're actually using = smaller CSS bundle.