Why is Safari the modern IE? This is discovered by @rschristian.dev , and here I am quoting again: > for us to continue to develop WebKit we now need to use Firefox or another non-WebKit browser to land pull requests. bugs.webkit.org/show_bug.cgi... BTW, `requestIdleCallback` is still missing.

I have spent the past months developing a plugin for @nextjs.org and App Router. It is an absolute nightmare. The image contains all the bullet points. But if you are interested, here is the link to the article containing the full story behind the struggle: github.com/SukkaW/style...

That's only 3 weeks. Look at my dead simple PR toward @nextjs.org , took them 3 months to merge: github.com/vercel/next....

#TodayMyPullRequest Make @fastify.dev's etag 70% to 110% faster on medium (2 KiB) to large (2 MiB) inputs: github.com/fastify/fast...

Why is @github.com and @npmjs.bsky.social 's the trusted publisher feature stupid? The simplest thing: how do I set up the trusted publisher if I am creating a brand new package? In the meantime, @pypi.org allows you to set up the trusted publisher before/while creating a new package.

Announcing eslint-react.xyz v2.0.0: Now ESM-Only eslint-react.xyz/docs/release...

I already know macOS 26's new design is suck, I didn't know it would end up this kind of suck.

Once again, my proposed github.com/pnpm/pnpm/is... would protect the community against such attacks. Yet @pnpm.io refuses to implement this.

Multi-threaded linting creates extra challenges (and overheads) for many popular ESLint plugins: typescript-eslint, eslint-plugin-import(-x), etc. See github.com/un-ts/eslint... as an example.

#TIL It finally happens! @MacHomebrew's Parallel downloading feature has already landed and can be enabled right now with the environment variable "HOMEBREW_DOWNLOAD_CONCURRENCY={int}". This will be enabled by default in the future. See GitHub Issue github.com/Homebrew/bre... for more.

在 Fediverse 分身运行约三年半后，我台在 Bluesky 上的分身开始测试运行。各位 Bluesky 社交平台的用户将可以在平台上直接订阅本台更新。 我们的帐号是： @thecascading.bsky.social 欢迎反馈遇到的问题及对频道的建议。 #today

The notorious copypastor Tencent Cloud grabs all articles from my blog and posts them on their website without my permission, yet they want me to promote their tools in my blog. Go to hell, Tencent and Tencent Cloud.

[zh-Hand] blog.skk.moe/post/proxmox...

Now, who needs to be sacked for the cost efficiency of all~

It still shocks me that no one has #RIIR the homebrew yet. The slowest package/dependency manager/tool these days (no parallel casks downloading, no multi-threads downloading, and no parallel attestation verification).

So @pnpm.io's onlyBuiltDependencies feature is flawed by default: you don't re-approve to update dependencies. Let's say you use @rspack.dev and add "rspack/core" to the list, what happens if rspack is compromised and releases a malicious version? It is still "trusted" by pnpm.

Oracle justified its JavaScript trademark by claiming Node.js — now it wants that ignored #FreeJavaScript deno.com/blog/deno-v-...

Others' vacation plans: traveling, eating, meeting friends... My vacation plan:

It still shocks me that JavaScript runtime nowadays still does not optimize array destructure access. This means `let [v, setV] = useState('')` is way slower than `let t = useState['']; let b = t[0]; let setV = t[1]`). So it's React Compiler's turn: github.com/reactwg/reac...

I must admit, GitHub Actions's new hosted arm64 runner (currently in public beta) is FAST, about 100% faster than the amd64 ones. Though there are some issues, one of them is EACCES: github.com/actions/part...

This is my #GitHubUnwrapped! Get your own: githubunwrapped.com

What we could learn from the recent token theft attack against @rspack.dev ? Package managers should implement a protection mechanism to prevent an already attested package from upgrading to an unattested version.

Just landed a change with some help from @skk.moe to save 112 TB of traffic to the npm registry by switching to the amazing tinyglobby library from @superchupu.dev. I noticed this opportunity using an awesome tool that @fuzzyma.bsky.social developed and shared with the @e18e.dev community!

Go 1.23 enables the experimental "Post-quantum cryptography" X25519Kyber768Draft00 in `crypto/tls` by default, resulting in the TLS Client Hello sent surge from the typical 252 bytes to 1476 bytes. For improperly configured firewalls or load balancers, this can lead to client TLS handshakes failing.

Just submitted a feature request toward @eslint.org ~ github.com/eslint/eslin...

I made an ESLint rule to help detect chained higher-order array methods, so I can replace them with a single `.reduce()` to improve the performance of my code.

I am still not a fan of @rspack.dev . Just search "TODO-RSPACK" in the following repo to see why: github.com/SukkaW/style...

It has been months after React released the React Compiler, and it seems that I am the only one who has implemented the webpack/rspack integration for React: github.com/SukkaW/react...

Hello, Sukka is here!