Just got the third and fourth walls up on my treehouse build 🌳🏡 - Next up is the roof.

HeroDevs just launched our EOL Dataset on ProductHunt. EOL Dataset is a free tool that tracks software lifecycle status across 12M+ package versions using official EOL declarations and ML-based detection of maintainer abandonment. Check it out - www.producthunt.com/products/eol...

EOL Dataset: Find every EOL dependency in your stack. Free. In 5 minutes. | Product Hunt

Your SCA checks for CVEs. It doesn't check whether anyone is still maintaining the software. That's a different question, and until now, no tool answered it well. We track lifecycle status across 12M+...

producthunt.com

Just wrapped up #vulncon2026 - fascinating conference and some exciting updates for the vulnerability space. I put together my thoughts on the conference here - www.herodevs.com/blog-posts/h...

HeroDevs Blog | HeroDevs at VulnCon 2026

HeroDevs' VulnCon 2026 recap: Updates on CVE program scaling, NVD enrichment changes, AI's impact, and Open Source vulnerability management shifts.

herodevs.com

Node excitement 😉 Congrats to @marcoippolito.dev on making it official: type-stripping in Node 25 is now declared to be stable 🎉 You can run: node index.ts The capabilities have not changed since Node 24. This is purely a maturity indicator.

Marco Ippolito@marcoippolito.dev · 9mo ago

Type stripping is now stable. Enjoy 🌞

tsup is not actively maintained anymore 👀 With >9M NPM monthly downloads and >10k GitHub stars, tsup is undeniably a popular choice for bundling. Unfortunately, it is not under active maintenance anymore. Thanks to @egoist.dev & contributors for all the work on tsup 🙏🏻

ANNOUNCEMENT: I'm looking for work! I'm a JavaScript/TypeScript expert with a ton of experience in Node, ASTs, Testing Frameworks, Docker, and more! - 10 years experience - Former core maintainer of Prettier - 315 GitHub repos, 198 npm packages suchipi.com/Resume2025.pdf

Chicago ✊

Just put together a guide on the often-overlooked challenge of securing transitive dependencies in End-of-Life JavaScript software. If you've ever wondered when to use ^ vs ~ in your package.json (and why it matters), check it out: www.herodevs.com/blog-posts/s... #JavaScriptSecurity #security

HeroDevs Blog | Securing Transitive Dependencies in End-of-Life Software: A Guide

Learn how to secure your JavaScript applications against vulnerabilities in transitive dependencies—especially when using end-of-life (EOL) packages. This guide covers npm versioning strategies, updat...

herodevs.com

At HeroDevs, we’re actively working with key CVE program stakeholders and other cybersecurity vendors to chart the path forward. As we wait to see what the future of the program looks like tomorrow, we stand firmly behind the CVE program and are committed to ensuring its longevity indefinitely.

"This isn’t just about maintaining a database. It’s about maintaining trust in the systems that protect us all." www.forbes.com/sites/tonybr...

Cybersecurity World On Edge As CVE Program Prepares To Go Dark

MITRE’s CVE program may shut down as DHS funding expires, threatening global cybersecurity coordination and exposing critical gaps in vulnerability tracking.

forbes.com

The CVE program for tracking security flaws is about to lose federal funding

The CVE program for tracking security flaws is about to lose federal funding

CVEs are used by Microsoft, Apple, Intel, and many others.

buff.ly

Got to see Lupe Fiasco at the #grizzlies halftime show yesterday! All in celebration of retiring the Grindfather's jersey.

It's pretty awesome that a few htmx attributes are enough to enable lightning fast live updates to a page. No additional framework required.

Another Grizz game, another chance for in-stadium lightning fast box score updated. #grizznation #memphisgrizzlies #cloudflare #astro #htmx boxscores.live/bf40b3ca-ad5...

Bounce back dub 🏀🔥 #memphis901 #basketball

If anyone is watching the grizzlies game in-stadium tonight, here's my widget for checking box scores, with lightning fast load times ⚡⚡⚡ boxscores.live/9b389e50-506... #grizznation #memphisgrizzlies

Hey Grizz fans! Here's a little widget I put together last weekend for tracking box scores live. If you're watching at the stadium it should load faster than any app available! #grizznation #cloudflare #astro boxscores.live/2173cbd0-81e...

I'm working on a little side project, and the api I'm hitting is making me convert timezones 😭. At least there's `Intl`! --- new Intl.DateTimeFormat('en-US', { timeZone: 'America/Chicago', year: 'numeric', month: '2-digit', day: '2-digit', }); ---

Just burned a 40 minutes debugging wrangler.toml issues. Note to self, read the docs!!! At the very top of Cloudflare's configuration page they recommend running `npx wrangler pages download config` instead of writing one by hand. developers.cloudflare.com/pages/functi... #cloudflare

Configuration | Cloudflare Pages docs

Pages Functions can be configured two ways, either via the Cloudflare dashboard ↗ or wrangler.toml, a configuration file used to customize the development and deployment setup for Workers and Pages Fu...

developers.cloudflare.com

I missed the grizzlies game last night, looks like Scotty Pippin Jr was on fire!! 🔥🔥🔥 #grizznation

I'm building a small widget that consumes two rate-limited endpoints. I want to cache results for a minute for each endpoint using Cloudflare Workers. Do I: 1. Create one Worker, using caches.default to manually handle caching; or 2. Create two Workers, each using Cache-Control headers?

Do I do it? What's one more domain? Haha

Another Angular v19 tidbit: the `effects` allowSignalWrites flag is entirely removed, allowing effects to set signals by default. Note that `effects` are still in developer preview. I try to avoid effects if feasible, preferring rxjs over effects. blog.angular.dev/latest-updat... #angular

Latest updates to effect() in Angular

Authors: Alex Rickabaugh Mark Thompson

blog.angular.dev

#grizznation #memphisgrizzlies

Huge first half from Luke Kennard, Des, and Jaylen Wells. Let's keep it goin! #grizznation #memphisgrizzlies

Tough game for the Grizzlies tonight, but on the bright side Santi had the most points out of anyone on the floor (28) _and_ the most rebounds (11). #grizznation #memphisgrizzlies

Angular v19 is here! There are so many new features, but one that I'll call out now is the ability to pass environmental variables during build time: `ng build --define "apiKey='$API_KEY'"` blog.angular.dev/meet-angular... #angular

Meet Angular v19

In the past two years we doubled down on our investment in developer experience and performance — in every single release we’ve been…

blog.angular.dev

Another win at home for the Grizzlies! Jaylen Wells plays for 26 minutes, 15 points, and 40% Field Goal percentage. And he got a pretty awesome dunk. #grizznation #memphisgrizzlies

An essential starter pack for science fiction nerds - go.bsky.app/A4YKX6w

Memphis I made a starter pack: go.bsky.app/DXWGKE8