omg, how did I not notice that dependabot can exclude folders now?

When you don't touch a project for a bit and all your deps are behind...

more coming soon. exciting stuff that's gonna bring new life to the javascript ecosystem & tty envs 💣

Real excited for more of this. Just need to figure out how to buy more time to play with it!

clack 1.6.0 is out. keyboard hints on select menus, cleaner note() output, and a handful of fixes that make multiline + password prompts behave the way you'd expect. big thanks to @florian-lefebvre.dev for helping ship this 💣

Given the feedback, we decided to move forward and start verifying maintainers and projects in the npm ecosystem. Later on, large ecosystem projects could also become verifiers for their communities. Reach out if you're interested in these conversations! Here are the first 100+ verifications 🩷

What's the landscape for local-first in vue? Seems like everything defaults to React these days (at least at first).

… are fucking kidding me. A github.com cross-account RCE due to the most pedestrian of injection attacks along the obvious exposed surface… and they actually have a globally shared “git” UNIX user!! This is not what taking the role of supply chain stewards seriously looks like.

Getting real excited to use this to build utility CLIs in TS that just weren't really possible before.

Added "line" mode to clayterm to support nice interactions in normal scrolling CLIs. The trick: 1. render frame continuously into the region at the bottom. 2. "commit" the final frame to scroll history. Non-terminal pipes like CI logs see the last frame only, so look nice github.com/thefrontside...

🚨 Active supply chain attack on [email protected]. The latest version pulls in [email protected] -- a brand-new package that didn't exist before today. We're still investigating. If you use axios, pin your version and audit your lockfile. socket.dev/blog/axios-n...

To celebrate the launch of the @npmx.dev alpha, I wrote up a guide on how to make your first contribution to an open-source project. Let me know if this helps you make your first contribution (and it doesn't have to be code)!

Lovely to see this evolve over the past weeks. Cheers to all the effort and care folks have put into this!

Heartbreaking. Take the time to read this post. We're doing such a terrible job as a society in distributing resources. Emelia's work is so valuable. We need her focused on open networks. She would be fully funded in any sane universe. Hire her. Or donate to help her thrive so she can help us.

Protests happen, but most of what is happening in Minneapolis isn’t protesting. More accurate terms: - observers - witnesses - volunteers - neighbors - residents - people

wonder how the “our ICE contract was only $200,000” githubbers feel these days

Spending some night brain cycles thinking about open source sustainability. 😮‍💨

With Elon enabling and profiting of the production of CSAM (Child sexual abuse material), I finally think of Twitter as X now

Interop is brilliant. Aligning the efforts of all browsers around crucial focus areas every year is doing wonders for interoperability, and its effect is compounding.

ECMAScript excitement 😉 The Temporal API ships in Chrome 144 Beta today 🎉 developer.chrome.com/blog/chrome-... Right on time. Arriving in the Chrome Stable release in approximately one month!

I've turned on automatic tab closing on my new phone, in part, because my previous phone still has 300 tabs open. It's jarring but... I think I might like the forced cleansing? Helps to force me to immediately shift something to a long term location if I really care.

One of those days where I found a werewolf shaped problem for a client. Wasn't specifically looking for that type of problem, but glad I had that silver bullet ready.

Excited to talk about local dev and testing through "simulating" data for your APIs on the @github.com OSS live stream today. We are diving into a project that I have been using with clients for years to quickly stand up APIs to test your apps. Starts in 2 hours! www.youtube.com/watch?v=Uw8k...

Has anyone happened across a plugin or extension or something that hides private GitHub repos, etc, for use when pairing/sharing/streaming?

That urge to stack up projects to freely swap between and never be bored, but then invariably way over extend myself. 🫠

Our youngest kiddo wants to watch Cake Pop Demon Hunters. Worth the watch?

This initiative looks like a lovely way to help the ecosystem shift forward!

A commonly proposed alternative to structured concurrency in JavaScript is "why not use async/await + AbortController" But strangely enough, nobody actually ever does this in practice 🤔 Here's why it's not a real solution frontside.com/blog/2025-0...

Argh, Windows... The apps and windows seemingly random behavior opening and moving between monitors. *annoyed sigh*

I am the destroyer of useEffect. I ruthlessly cull the many instances in each component I touch. Also, please stop. I have enough on my hands making certain the node_module black hole doesn't kill us first.

I probably don't talk about it enough, but we made a package to help in building up a changelog and handling releases. We made it for @tauri.app as we needed to release multiple Rust crates and JavaScript npm packages all from the same repo, coordinated. github.com/jbolda/covec...

Went (indoor) rock climbing for the first time in probably more than a decade. Pretty certain I blacked out on the way out and got hit by a truck because oh my do I hurt... Brought the kiddos along though and they enjoyed it 😁

Looking through the TODO list and seeing those entries from 2022 🫠

There are a lot of incredibly talented people on the job market right now. Many of my friends in DevRel, OSPO, program management, and engineering are looking for their next role, some have been searching for months. If you’re hiring, please consider sharing a link to your open roles below. TY ❤️

It baffles me the number of things that appear in my head, but promptly disappear before I can even add it to the TODO list.

This tracks...

The ecosystem is coming along! Looking forward to try out more local-first libraries, and this is a great reference for it.

Surprise — we’re turning 20 later this year. We've impacted millions of users and 300K+ developers—from startups to enterprises to OSS. We never chased the spotlight, just the hardest problems— and after 20 years, boy, do we have stories. 😅 Follow along at #Frontside20

Less than 40 hours for this stream! Excited to explore more alternative rendering options in @tauri.app. Looking at chromium with Bill! www.youtube.com/live/6SO_hRD...

I added home row mods on my split keyboard weeks ago. And... have yet to actually try them.

I reread through the docs again this weekend, and saw a note about `--force`. That actually seems to work relatively well. I spun up a POC that I had been meaning to do. Made some changes in `node_modules`, stopped and started the server with `vite --force`, and did that for every change.

What is the vibe on `patch-package` or equivalent within Vite? It seems like it is still an expected use case, but with all the caching, it is rather difficult to muck around in `node_modules` to test things out. I feel like there is a flag or something that I am missing to improve that workflow.

Catching up on all of the DMs and messages today, and prepared to be overwhelmed tomorrow. 🙃 I suppose that is better than the alternative of forgetting about and accidentally ignoring folks! (Which if I have, sorry!)

the doge teens destroying the general services administration's magnetic tape backups because they think it's like a vhs of aladdin 2: the return of jafar might be the niche thing that kills me

This is not an April Fools joke! 🤣 Hop in as we check it out and ask questions. Starting in an hour!

Some interesting developments on the @tauri.app front, and we are excited to bring Tony on the live stream to discuss in 14 hours! Expect plugin experimenting. youtube.com/live/1W6FIpC...

Ugh, compiling an ESM lib for a GitHub Action is such a royal pain. Days wasted and on my 4th option now. To be fair, CJS and WASM are in the mix, but.... I will be happy when the ecosystem is on the other end of this migration of CJS vs ESM.

When you are writing frontend tests (say through Playwright, etc.), what has been your worst experience in trying to test the "negative" cases? Say I want an endpoint to return a 404, and test the appropriate banner message. What is painful with that experience? Working through API design here...

What are folks using these days for bundling for a GitHub Action? I've likely multiple actions that are in need of migrating.