🚨 Active npm supply chain attack: keyv@6.0.0 and 13 other packages have been compromised. keyv alone gets 154M weekly downloads. The worm steals cloud and CI credentials, then uses stolen npm tokens to publish trojanized versions of more packages.
Hubert Sablonnière
@hsablonniere.com
😜 Curious Web developer and movie addict
We are going to spend the next 20 years discovering and dealing with the mental health effects of over-reliance on AI.
Released v0.6.0 of `servitsy`, my tiny HTTP file server for local testing. Nothing new, but I had updated all development tooling in the project in the past year and didn’t want issues to creep in because I’m dogfooding the year-old release. npmx.dev/package/serv...
servitsy - npmx
Small, local HTTP server for static files
npmx.dev
📺 Just finished Monarch S2 👍 Better than S1 for characters and emotions 💪 Less monsters but the ones we get have really good action scenes 🤯 The problem is the shared universe with the movies, this Axis Mundi vs Hollow Earth makes no sense lol en.wikipedia.org/wiki/Monster...
Monsterverse - Wikipedia
The Monsterverse[b] is an American multimedia franchise and shared universe featuring Godzilla and King Kong, as well as characters by Toho Co., Ltd and original characters. The franchise consists of…
en.wikipedia.org
C'est aujourd'hui que ressort RRR sur les écrans français grâce à Carlotta, foncez le voir si ce n'est déjà fait, allez lire l'interview de Rajamouli dans Mad Movies et le très bon papier de l'ami Lelo Jimmy Batista dans le Libération du jour !
Rrr Movie Dance Off
ALT: Rrr Movie Dance Off
static.klipy.com
🤔 The IMAX subreddit is a cult, science no longer exists, plots and scenarios don't matter, it's only about the ratio of the image, the number of film perforations, the size of the screen... 😬 Change my mind
Est-ce que le bonheur, le vrai, pour se changer les idées en ce lundi matin ne serait pas une émission de 2h30 made in @peakcinemapodcast.bsky.social sur la saga Fast and Furious ? 🚗
Toute la saga Fast & Furious notée et classée dans la PEAKLIST ! 🔥🚗🚓 2 h 30 d'émission vidéo en exclu pour nos soutiens Patreon. 👉 www.patreon.com/peakcinema
C'était évident que DHH était une grosse pompe à merde depuis l'épisode de la "liberté d'expression en entreprise", mais y'a encore beaucoup trop de gens pour le défendre ou lui laisser le bénéfice du doute. DHH est un raciste qui traite les Roms de nuisibles.
Just in case you still use any Basecamp products, DHH is crashing out about his AI product gently pointing out that it’s bad for him to have extermination fantasies about the Roma people.
Post a perfect album from the 90s that isn't nirvana, soundgarden, pearl jam, or alice in chains
Post a perfect album from the 90s that isn't nirvana, soundgarden, pearl jam, or alice in chains
ECMAScript excitement 😉 Congrats to my coworker @ashley-c.bsky.social at TechAtBloomberg on advancing Await Dictionary to Stage 3 at TC39 🎉 Promise.all returns positional results as an array. Promise.allKeyed allows named results inside an object 👍 github.com/tc39/proposa...
Porffor officially goes alpha on August 11th with an in-person in San Francisco! It brings self-hosting and a complete rewrite, plus more: honk.foo/porffor-alpha/
Porffor goes alpha August 11th
A self-hosting and rewritten Porffor launches in SF next month!
honk.foo
👍 Découverte à SériesMania 2025, After the Party m'avait beaucoup marqué ➡️ 6 épisodes, dispo sur Arte ⚠️ TW pédocriminalité www.arte.tv/fr/videos/RC...
After the Party - Séries et fictions | ARTE
Penny tente de lever la chape de plomb sur les agissements de son ex-mari, qu'elle soupçonne de pédocriminalité. Une excellente série néo-zélandaise qui ausculte la déflagration lente de l'agression…
arte.tv
Type-aware Linting via Oxlint is now stable 🎉 oxc.rs/blog/2026-07...
Type-Aware Linting Stable
A collection of high-performance JavaScript tools written in Rust
oxc.rs
🎬 After watching The Odyssey (2026) 👀 I decided to do a movie marathon on the matter 😔 For now it's a bit disappointing 🇬🇷 First time I watched a greek movie 👎 I'm more and more convinced that Brad Pitt often plays the same way and is better at comedy/goofy roles boxd.it/VMBX0
[marathon] From Troy to Ithaca
Christopher Nolan's The Odyssey made me want to explore the whole matter of Troy. I focused on Homer's Iliad and Odyssey, but I also kept the greek tragedies around the trojan war, and a few modern…
letterboxd.com
🤣 Nolan, il déploie son blog avec 2 articles sur un Kube dédié en HA
ECMAScript Excitement 🎉 This week, at its 115th meeting, TC39 advanced these proposals: 3️⃣ Await dictionary 2️⃣.7️⃣ Thenable curtailment 2️⃣ Error code property 2️⃣ Fused multiply-add 1️⃣ Intl.DateTimeFormat alignment with other standards 1️⃣ Linear matching 1️⃣ Map.take
🤔 Quand je vois le tapage autour du format IMAX et du "vrai IMAX", tu sais, celui où t'es assis sur les genoux de Chris et où la pellicule a été certifiée par Zeus, je pense que je vais arrêter mon côté snob en disant "si t'as pas vu X en salle, on a pas vu le même film" 🤗 La vie est trop courte
🤣 Nolan, j'suis certain il code en pur fonctionnel genre OCaml
Porffor is now self-hosted, meaning it compiles itself with itself! This is made possible by Porffor's new rewrite, reducing its lines of code by >50% and making C output up to 5x more efficient! Here you can see the stats before and after the rewrite for Porffor itself:
the thing that killed my editor for me was fast local voice models more than OpenCode from the beginning i was looking for faster ways to interface with the computer. for a while that meant becoming very good with the editor but ultimately voice beats that
TabFont : une police qui transforme la notation d'accords de guitare en diagrammes visuels au fur et à mesure de la frappe. Fonctionne aussi avec la tab notation classique. ⬇️ https://philatype.com/tabfont/
🎬 The no CGI marketing around Nolan, Tom Cruise and others is ridiculous 💪 Give time to VFX artists and they'll make wonders youtu.be/AFLcP-t0-kI
NOLAN'S CGI is really just INVISIBLE CGI ("no CGI" part 6)
Sign up to Milanote for free with no time limit: https://milanote.com/themovierabbithole0726 -------------------- Welcome to this Nolan special of "No CGI is really just invisible CGI"! I can't…
youtu.be
🤔 Le marketing FOMO autour de l'IMAX me fascine et m'exaspère
[𝗗𝗘𝗩𝗫] C’est le jour J ! À 13h, @lostinbrittany.bsky.social et @hsablonniere.com présentent le refresh du menu de la Console Clever Cloud : démo, nouveautés, questions-réponses et retours d’usage. Venez nous dire ce que vous en pensez : www.youtube.com/live/kwOmAWc...
Nouveau menu : naviguez plus vite dans la Console Clever Cloud
YouTube video by Clever Cloud
youtube.com
265 milliards d’euros, c'est le coût des dépendances 🇪🇺 sur les couches logiciels incluant le cloud. Arno Pons pose la bonne question : si un fournisseur augmente ses prix ou coupe le robinet, quelles sont vos options ? À voir en intégralité ici : youtu.be/dNo2XxxoGFM
📣 The moment is here. 📣 TypeScript 7 is officially released! 7️⃣ devblogs.microsoft.com/typescript/a...
Announcing TypeScript 7.0 - TypeScript
Today we are proud to announce the availability of TypeScript 7, a 10x faster native port of TypeScript! Since its early days, TypeScript has promised to
devblogs.microsoft.com