You've seen a very small sample size of reports they actually sent. The is just another round of the "oh we made something so powerful" marketing schtick. I'm tired.

Manifold Security tricked Claude' GitHub bot to merge malicious code to repositories by spoofing their requests under the names of famous developers www.manifold.security/blog/spoofed...

did @npmjs.bsky.social just break `pnpm audit` for everyone? This must be the improved supplychain security work they are talking about... github.com/pnpm/pnpm/is...

The "pnpm docs" and "pnpm home" commands will open @npmx.dev in pnpm v11.

It really bothers me that so many posts of the people i am following no longer contain links. The web is links, you are breaking it.

The little things take up so much space on mobile ui... 3 items visible above the fold.

`tsnapi` - a snapshot testing utility for the public API for library maintainers. Snapshots for both JavaScript and TypeScript declarations. It would help prevent unintended breaking changes on public API signatures. Thanks @sxzz.dev for the initial idea and implementation. github.com/antfu/tsnapi

Hey @discord.com how come you are able to profile your users to access their age but we still have to manually clean up/ban cam-girl spam invites with discord-gg links from new joining users? Connect with your peers on other platforms and prepare to leave discord...

Friendly reminder that npmjs.com lacks proper 2FA validation on editing package settings. - do not leave authenticated browser tabs open - do not stay authenticated on cli / keep a token in your .npmrc

Just published a new version of `create-vite-extra` matching the new designs and setup from `create-vite`!

German bureaucrats might know how to spell digital sovereignty, but they still don’t understand what it entails.

this! also available as text version: www.terrygodier.com/the-last-qui...

It's di.day again next Sunday. If you are still using instagram, time to leave.

You may have heard me being critical of vibe coding. But with Anthropic finally open sourcing claude code cli, i wasted no time to dive into it and build you the svelte vibe coding tool you deserve: `npx svibe` happy svibing!

@npmx.dev also has a builtin diff viewer that even includes a dependency change summary: npmx.dev/diff/axios/v...

Hey @github.com, maybe you want to clear that up on your own site/blog and also clarify what your stance on these "suggestions" is for the future? > this was surfaced more frequently than intended alongside other feature suggestions My preferred frequency is 0, thanks.

Made a site to compare projects on Open Collective. Some are managing funds really well while others are burning through quite a bit. octrends.bjornlu.com

Just remembered to check my #sveltekit build times on Vercel after updating to #Vite8. Thanks @voidzero.dev @dominikg.dev

🚨No Joke: Conservatives in the EU Parliament (EVP) want the vote on #ChatControl 1.0 to be repeated this Thursday - even though the Parliament already voted NO! 😡 Make sure your MP stays strong. Contact them now! 👉 fightchatcontrol.eu#contact-tool

hacking away at a new @npmx.dev feature of course 👀

Join the Vite ecosystem tomorrow to celebrate the Vite Team 5th Anniversary by rewatching together the Vite Documentary! Let's remember the stories of the people who connected to extend together our shared commons. And stay at 3:45 PM UTC to participate in the live stage after the movie 💜

⚡️ Vite 8.0 is here! The most significant architectural change since Vite 2. ⏬ Powered by @rolldown.rs bringing faster production builds and more consistency 🛤️ New features such as tsconfig paths and emitDecoratorMetadata support vite.dev/blog/announc...

It’s here. github.com/vitejs/vite/...

Open Collective has started using Persona as their verification provider Our team member will not be using Persona to verify their identity, privacy is important, That's why we are closing our Open Collective account (and GitHub Sponsors) You can still donate to us through Ko-Fi: ko-fi.com/scan

As you know, one of the most underrated yet highly scalable (and therefore dangerous) attacks is a supply chain attack, when you can get attacked from node_modules. pnpm has the most advanced protection. They’ve just published an article with guidelines: pnpm.io/supply-chain...

GrapheneOS is a good choice if you want to degoogle your phone. One caveat is that you currently have to use a google pixel phone to use it. Starting 2027, you can also buy a motorola phone instead.

Hundreds of scientists say stop! ✋🚨 Governments should pause plans for mandatory #AgeChecks on online services until serious #privacy and #security concerns are addressed. 👉 Read more on #AgeVerification, why scientist say NO & whether your country wants it: tuta.com/blog/age-ver...

The premiere is set 🔥 The IntelliJ IDEA documentary is juuuust around the corner. Head over to our YT channel & turn on that reminder 🔔🙏 👉 youtu.be/Kourq_Lz03U

It's di.day. Take some time and reduce your dependence on digital services that spy on you. Even if you can't leave immediately, at least connect with your friends and peers on privacy friendly services like signal, matrix, proton or tutanota to ensure that you stay connected. #DIDay #redundancy

🚨Google wants to kill Android freedom We've signed an Open Letter to urge #Google to keep #Android #free & #open! Otherwise Google’s Android is becoming Apple: Your device, their rules. Here's more info 👉 tuta.com/blog/google-... Read the full open letter here 👉 keepandroidopen.org/open-letter/

As a formal methods PhD, it's embarrassing for Anthropic to incorrectly describe static analysis in their Claude Code Security announcement. Security and formal methods engineers already have data "reasoning" tools, this isn't the bottleneck, false positives, which LLMs absolutely have, is.

Did you know It's digital independence day this Sunday - and every first Sunday of the month? check out di.day You can find local meetups to go to termine.di.day or recipes to use di.day/category/rez... #DIDay

Today is the day, the EU decides on Chat Control 1.0. Will they let the Trojan Horse through the gate and let Google, Microsoft, LinkedIn etc continue to scan all your messages? We at Tuta say NO.  ❌ No scanning ❌ No mass surveillance ❌ No age verification

Don't like the age verification that Discord announced? Looking for a Discord alternative? I sure have been! I've gone ahead and put together a list of alternatives and their fitness for use in communities big and small. no-bull.sh/blog/2026/02...

Thanks Svelte

This is huge news!! Super excited to be working with @ariperkkio.dev ❤️

ESLint v10 ships with a Node.js version requirement that necessitates `require(esm)`, yet the package remains CJS only. Why?

> If you work in OSS, consider adding your voice. The feedback period ends February 3, 2026 2 days left. Please take some time and provide feedback if you have opinions or ideas for the EU. ec.europa.eu/info/law/bet...

Good read. A submission to the European Commission's call for evidence on Towards European Open Digital Ecosystems (importance of OSS for EU tech sovereignty, security and competitiveness). It ends with: > If you work in OSS, consider adding your voice. The feedback period ends February 3, 2026.

Droppin' this here for anyone else who has absolutely 0 interest in GitHub's new "Agents" tab added to the top of every repo: github.com/orgs/communi...

It took a while, lots of debugging and fixes in rolldown, vite-plugin-svelte and sveltekit, but today it happened. For the first time, sveltekit tests in vite-ecosystem-ci for vite-8 beta passed. github.com/vitejs/vite-... Thanks to everyone who helped getting there especially @sapphi.red

while you're at it, cut one for @willow.sh as well, so much cool stuff on npm.willow.sh , eg. url state for package content npm.willow.sh/package/svel...

someone from npm needs to write a check to bjorn and merge his userscript into main

IntelliJ IDEA: The Documentary arrives 5th March! 🚨 It's the IDE that makes you "feel like you're in the cockpit of a figher jet". And to celebrate their 25th birthday, we've released the trailer -- now live on our YT channel 🎉 youtu.be/TwMXi6tDzLE

Svelte Japan Offline Meetup #6 We had a wonderful time. Awesome speakers, attendances and a place. Thank DeNA for offering an amazing place. #sveltejapan

The first version of vite-plugin-svelte for vite 8 has been released: github.com/sveltejs/vit... Please give it a try in your svelte apps and report feedback.

🚀pnpm 2025 recap: 2x download growth, new homepage, my first JSNation talk, and v10 feature highlights pnpm.io/blog/2025/12...

we released the new @e18e.dev ESLint plugin today! 🎉 this comes with 3 categories of rules: modernisation, performance, replacements it also works with oxlint and most of the rules have auto-fixes 🛠️ try it out and let us know any feedback/rule suggestions in discord/bsky/github!

It's been so great meeting you all, thanks everyone for coming. Until next time