Is that a surprise? The same can happen by having the LLM update the eslint configuration to add a malicious plugin. Due to how vscode works it'll be instantly evaluated.

I heard good things about Zed and Warp so I decided to try them, as I needed to reinstall a laptop anyway. So far they seem nice enough !

Ruby Central said some really concerning things today. I don’t think they’re representing the situation accurately. andre.arko.net/2025/10/09/t...

An unfortunate oversight

Yarn 4.10 is fresh off the press! 💫 It includes a new npmMinimalAgeGate setting, catalog support, and OIDC publishing.

A good security aspect of my job lately has been that I spend significantly more time writing package managers than installing packages 😄

Non-AI items on my GitHub wishlist: 🔍 GH Pages previews for PRs ⚠️ Status checks for issues 📝 Type hints in the viewer 🔗 GH first-parent iterator in the API Anything else I forget?

Can’t wait for this to land: drafts.csswg.org/mediaqueries... (API for recording user preferences in a way that just works)

Why is there no JS API that can flip prefers-color-scheme for the current page? Dark mode switches require adding custom selectors, which doesn't compose with third-party components.

Mistral is very good at building interesting narratives; much better than ChatGPT it feels: chat.mistral.ai/chat/5110f7a...

React 19 broke "click a component to open its source"; not sure the team is even aware? 😮 github.com/facebook/rea...

The more I see async iterators, the more I feel like they're a really fancy way to make a frustrating and painful API

I've been hoping for this proposal for so long ❤️ github.com/tc39/proposa...

We need a European Sovereign Tech Fund github.blog/open-source/... "Open source software is critical infrastructure, but it’s underfunded. With a new feasibility study, GitHub’s developer policy team is building a coalition of policymakers and industry to close the maintenance funding gap."

My opinions about an old license drama are subtly evolving

My wife gave me a birthday present and the kid inside me is screaming 😱

I'm thinking perhaps we could expose the `pnpapi` module to every install, whether PnP or not, so that 3rd-party tools could easily introspect the dependency tree without parsing the lockfile.

Do you know any blind developers? What do they think about AI in their day-to-day work?

Can you imagine the nerve? github.com/viperdavis/f...

The GH API is simultaneously great and frustrating. It's mostly complete, but lacks a couple of fields for seemingly no particular reason (here, it's the job summary that's missing).

Ah, seems to be because of Cloudflare (www.cloudflarestatus.com), which in turn might be because of GCP

Package manager summit with @kochan.io at #JSNation !

@kochan.io's talk about configDependencies made me realize we forgot to document remote plugins on the Yarn website 🙈

I'm not a fan of Bazel myself for the JS world, mostly due to DX concerns, but it wouldn't cost much for Yarn to generate Bazel rules on install. That would hopefully integrate better than rules_js. Do you use Bazel at work with JS projects?

Flying to Amsterdam today! 🇳🇱

Someone has been publishing AI-generated content to Spotify listing actual artists as co-writers to hijack recommendations. To make it worse I don't see how to report it - Spotify only lets me report images or text content, but not actual attempts to game the system 😕

Did you work with someone you'd recommend to convert your figma design into a static frontend?

I got a super fishy email in my inbox from someone advocating their OpenAPI package. Seemingly legit code, but new GH user, new domain, no tie to any public identity, email obtained through crawling ...

@notabenemovies.bsky.social en regardant l'épisode sur Thomas Dulain j'ai remarqué quelques différences par rapport à Wikipédia; est-ce que l'idée a été discutée de contribuer à l'encyclopédie les résultats et sources des recherches préparatoires des épisodes?

You can now natively use dependencies from @jsr.io using the `jsr:` prefix in your package.json and CLI commands! 📦

I figured it wouldn't be a lot of work, and it wasn't 🙂 github.com/yarnpkg/berr...

ChatGPT is now able to generate pokemon-like tilesets. Now how can I enforce the strict use of tiles?

@alanzucconi.com I just read your article about Minecraft's world generation algorithm - it's very interesting. Something that surprised me is that I didn't find any open-source re-implementation of the described worldgen pipeline; did I look at the wrong place?

I don't think it's a good outcome for Node.js users, but at least I feel relieved I can finally get out of this mess for good and focus on Yarn users rather than attempt to play nice with people who don't seem to share any of our UX tenets.

Today we're thrilled to announce our effort to port the TypeScript compiler and language service to native code, gaining a 10x speed boost in build times and editor responsiveness! devblogs.microsoft.com/typescript/t...

Cursor and similar tool make the Haste resolution almost interesting - since every file can be referenced by its name, it'd be much easier to add references to chat messages.

Hi @hermanli.bsky.social, are you up for a showcase next year in our charity marathon? We think we've got a serious contender ... #SpeeDons

Pokemon TCG Pocket is really killing it with its illustrations

Speedons 2025 starts in a couple of hours! If you haven't heard about it, it's an amazing 4 days of charity speedrun marathon for the benefits of @mdmfrance.bsky.social.

The "Doom in TypeScript" looks impressive in its implementation! It reminded me this other blog post.

Just finished my slides for next week's @typescript.paris conf. Or the first solid RC, at least 😄

Wooooh, deferred imports will be a nice boost for Clipanion commands! 🥳

It's different this time - they have been hand-picked by "print your last 100 lines of code"-man, perhaps even at a time he wasn't stoned.

Would be nice to have RegExp.escape implemented in Chrome

I had to skip last year's JSNation EU (🐣), but hopefully I'll fix that in June! Are some of you going to be there?

What's happening to the US is frightening, I wonder why they're not at the very least making protests across the country. Like preventing building access to the Musk agents, etc.

What's the size of your company monorepo, in terms of packages? Do you split a lot?

The Temporal API having different types for Duration / Instant / ZonedDateTime is smart. I think something similar could work well for path libraries, if they had a split between Relative and Absolute paths.

We're delighted to announce that SpeeDons will be broadcast on 3 international restreams! Bienvenue et merci !

🎤 About his talk: Maël will dive into best practices for building robust CLIs using #TypeScript. Learn how to leverage strong types to prevent runtime errors and improve DX. Whether you’re crafting simple scripts or complex tools, it will level up your CLI game!