My new article is out! A systematic guide to releasing npm packages as safely as possible in 2026 (with a Skill to quickly apply the practices to your open source projects). Not just “do X”: I cover real supply chain attacks and explain how each defense helps. evilmartians.com/chronicles/t...

The secure way to release an npm package in 2026—Martian Chronicles, Evil Martians’ team blog

How to protect your npm package from being stolen in a supply chain attack and improve its position in security ratings

evilmartians.com

Todoctor 1.4.2 is here! 🔧 Preview chart now responsive on window resize 🐞 Minor bug fixes Details: https://github.com/azat-...

Over the past month, 171 new rules have been added to the ESLint Unicorn plugin. That's incredibly powerful github.com/sindresorhus...

Releases · sindresorhus/eslint-plugin-unicorn

More than 300 powerful ESLint rules. Contribute to sindresorhus/eslint-plugin-unicorn development by creating an account on GitHub.

github.com

ESLint Perfectionist plugin has reached 10 million downloads per month! 🎉 github.com/azat-io/esli...

Eyecons 1.16.0 has been released! ✨ Added support for semantic rainbow theme Details: https://github.com/azat-...

Update control: Pin the actions you use to SHA commits. For npm, actions-up can do this github.com/azat-io/actions-up for other ecosystems, use pinact github.com/suzuki-shuns... actions-up has a --min-age 1 option to wait a day after a new version is released.

ESLint Plugin De Morgan 2.1.2 is out! 🐞 Fixed invalid autofixes for grouped boolean expressions Details: https://github.com/azat-...

Todoctor 1.4.1 is out! 🐞 Fixed panics in history collection 🔧 Prevented duplicate keys in preview blocks 🐞 Fixed favicon loading issue Details: https://github.com/azat-...

Another GitHub Action hack where old versions were swapped to infect CI. socket.dev/blog/trivy-u... It’s another example of why you should pin actions in your workflows by commit SHA, not by version tags. For JS projects, use actions-up: github.com/azat-io/acti... For everything else: pinact.

Trivy Under Attack Again: Widespread GitHub Actions Tag Comp...

Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

socket.dev

Wow! Thank you, @anthropic.com

ESLint Plugin De Morgan 2.1.1 is out! 🐞 Added explicit type annotation to configs export for better type safety Details: https://github.com/azat-...

ESLint Plugin De Morgan 2.1.0 is out! 🚀 Adds support for ESLint v10 Details: https://github.com/azat-...

Eyecons 1.15.0 has been released! ✨ New icons for OCaml, tsdown, JavaScript test & TypeScript test Details: https://github.com/azat-...

✂️ Knip v5.84.0 is out Updated React Native/Metro, Yarn, pm2, improved compilers, config hints, Language Server v2 & so much more. Thanks @wojtekmaj.pl, @jgoux.dev, @azat.io for invaluable contributions & input! You're the best ❤️ Changelog (got a minute?): github.com/webpro-nl/kn... Knip: knip.dev

Today I am 34

We're more than 150 humans collaborating at repo.npmx.dev 🎉

Actions Up is now available for installation via Homebrew. formulae.brew.sh/formula/acti...

actions-up

Homebrew’s package index

formulae.brew.sh

Claude Code, Codex, Gemini CLI, OpenCode - all use different config formats. I made a script to sync them quickly. Repo also includes my configs: subagents, skills, commands, MCP servers. github.com/azat-io/ai-c...

open source is incredible this project was started on thursday and open sourced on friday and people found out on saturday

Eyecons 1.14.0 has been released! ✨ Added icons for Julia, Twig, and PureScript Details: https://github.com/azat-...

Eyecons 1.13.0 is out! ✨ Added makefile & i18n icons 🐞 Now supports dockerfile extension Details: https://github.com/azat-...

Eyecons has already updated the Void Zero tool icons. github.com/azat-io/eyec...

VoidZero@voidzero.dev · 7mo ago

New Year. New Look. Same Mission. Make JavaScript developers more productive than ever before

Eyecons 1.12.0 has been released! ✨ Support for alabaster theme & ts config files 🔧 Updated vite, vitest & rolldown icons ✨ Added oxc icon Details: https://github.com/azat-...

Modern Luddites don't break machines, they just decline pull requests. The resistance has begun 😀 github.com/tailwindlabs...

feat: add llms.txt endpoint for LLM-optimized documentation by quantizor · Pull Request #2388 · tailwindlabs/tailwindcss.com

Add /llms.txt endpoint that serves a concatenated, text-only version of all Tailwind CSS documentation pages optimized for Large Language Model consumption. Extract text from MDX files, removing J...

github.com

Most supply chain attacks are at their most dangerous on the first day. So a good package manager should have an option to show only versions that are at least a day old (pnpm and Bun have this). actions-up (for GitHub Actions CI) has this too: github.com/azat-io/acti...

Released ESLint Plugin Perfectionist v5.0.0. 🎉 It’s a plugin for sorting imports, TS types, JSX props, classes, objects, variables, and more. In this release: move to ESM-only, dropped Node.js v18 support, two new rules. github.com/azat-io/esli... More in the thread below ⬇️

GitHub - azat-io/eslint-plugin-perfectionist: ☂️ ESLint plugin for sorting various data such as objects, imports, types, enums, JSX props, etc.

☂️ ESLint plugin for sorting various data such as objects, imports, types, enums, JSX props, etc. - azat-io/eslint-plugin-perfectionist

github.com

Token Limit 1.6.0 has been released! 🚀 Added support for Claude Opus 4.5 Details: https://github.com/azat-...

Astro 5.16 is out, featuring SVG optimizations and more! astro.build/blog/astro-5...

Astro 5.16 | Astro

Astro 5.16 brings experimental SVG optimization with SVGO, interactive CLI shortcuts, and improved developer experience across the board.

astro.build

🎉 ESLint Plugin Perfectionist just hit 5 million downloads per month! Thank you to everyone using it to keep their code organized. v5.0.0 is around the corner with some exciting updates! 🛠 github.com/azat-io/esli...

✨ markdown-exit is finally out! A TypeScript rewrite of markdown-it with built-in types, async rendering and more. ⚡️ Drop-in ready and works with markdown-it plugins. 🔌 #typescript #markdown #web Give it a try and share your thoughts! 💭 github.com/serkodev/mar...

GitHub - serkodev/markdown-exit: Fast, customizable Markdown parser and renderer with full CommonMark support. TypeScript rewrite of markdown-it with enhancements.

Fast, customizable Markdown parser and renderer with full CommonMark support. TypeScript rewrite of markdown-it with enhancements. - serkodev/markdown-exit

github.com