Tessera
Folgen

Ambar Mutha

@ambarvm.bsky.social

Frontend Eng at VMware https://github.com/ambarvm/

61 Posts36 Follower97 Folgt
Express@expressjs.bsky.social · 11mo ago

The maintainer of one of our dependencies, debug, was the target of a phishing attack resulting in the release of debug@4.4.2 with malware. Supply chain security is all of our responsibilities. Be careful out there, and for today don't update your deps. socket.dev/blog/npm-aut...

npm Author Qix Compromised via Phishing Email in Major Suppl...

npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.

socket.dev

Dominik 🔮@tkdodo.eu · 2y ago

@juri.dev I remember the nx docs recommend setting `fetch-depth: 0` to make nx-affected work; For us, on a relatively big monorepo, this took 1m40s on CI because it fetches all history😅. We now found out that setting `filter: tree:0` gets that down to 28s while nx affected still works 🤯

Gil Tayar@gil.tayar.org · 2y ago

In a nice turn of events, a week after I learned about this API I found a use for it at work. Thank you @ambarvm.bsky.social for this piece of info. 🙏 (and did I lose `p-mutex`? Nope - I used it to fake this API when running Vitest tests 😁)

Gil Tayar@gil.tayar.org · 2y ago

TIL: browsers have a native lock API. It even makes sense! Goodbye `p-mutex`? Will switch and see. Learning - first check native API before reaching to a library. These days, you might just find what you're looking for. developer.mozilla.org/en-US/docs/W...