At work I've been working on a safer, faster NPM mirror and place for teams to publish private packages. After roughly 8 months we're done! It's been a ride https://vlt.io/ #vlt #npm

Home | vlt /vōlt/

Package registries for teams that move fast

vlt.io

I wish wireguard would tell me if the connection is down instead of pretending its all good

Was curious why I've been getting more OOM errors recently, but just remembered I recently started some frontend work and have a Figma tab open 😅

As expected when npm starts blocking install scripts, malware just shifts to import-time.

Socket@socket.dev · last wk.

🚨 Two Joyfill npm beta releases were compromised with an import-time implant that resolves encrypted payloads through Tron, Aptos, and BNB Smart Chain transactions to load a Node.js RAT: • @joyfill/layouts@0.1.2-2773.beta.0 • @joyfill/components@4.0.0-rc24-2773-beta.4

Turns out #Hono quietely ignores HEAD routes and just rewrites them to GET unconditionally, explaining a pretty major performance bottleneck for us. https://hono.dev/docs/guides/best-practices#head-request-best-practices #hono #http

Best Practices - Hono

Web framework built on Web Standards for Cloudflare Workers, Fastly Compute, Deno, Bun, Vercel, Node.js, and others. Fast, but not only fast.

hono.dev

Just in case you still use any Basecamp products, DHH is crashing out about his AI product gently pointing out that it’s bad for him to have extermination fantasies about the Roma people.

The average node_modules has more contributors than most companies have employees. We just never see their faces.

Insistently referring to correct and novel LLM outputs as merely being "answer-shaped" is such funny cope. Yeah this so-called paperclip factory doesn't actually produce paperclips, they're just paperclip-shaped pieces of metal wire that can only coincidentally fasten pieces of paper together

Finally got wireguard up and running so I can VPN from my laptop and phone back to home. Bit more manual than I expected, I wish the server was able to hand out IP addresses, but neat to see it all working nonetheless.

I've used #MySQL for most of my career, but finally really getting in the weeds with #postgres And dang Postgres has some nice features but MySQL blows it out of the water performance-wise. That or Neon is just especially slow.

Someone in DC set up a “little free blockbuster” with DVDs inside instead of books lol

I told myself I wouldn't work for a company again that stylizes its name all lowercase, but here we are again. Making me look like I forgot to capitalize. It's the worst when it's at the start of a sentence.

✂️ Knip v6.29.0 is out Oh too many goodies to count: github.com/webpro-nl/kn... ⚡ And just in case you might be thinking Knip's performance has to suffer from all those plugins, compilers, features & backwards compat... it's not!

Venz

Easy and accessible dataviz

try.venz.dev

I don't know why, but oh-my-zsh asking me if I want to check for updates is the key thing that makes me want to stop using it and figure out my own config.

I just blogged: "Using a SSH bastion, but only when I'm touching grass" https://evertpot.com/ssh-tunnel-if-unresolvable/

It's true! I blogged! "Using a SSH bastion, but only when I'm touching grass" https://evertpot.com/ssh-tunnel-if-unresolvable/

Anyone wanna go in on buying the .staging TLD? Only need 250K

TIL about RUM indexes in posgres. Pretty neat!

Why would anyone ever want the slack in app browser instead of a real one?

Pretty funny juxposition. Here are some stats from an open source project I maintain: Weekly downloads

Joining the 10gbe club this weekend! Long waited for a good second hand deal for this router and finally got it

the biggest positive story on climate is that it doesn’t seem to matter how much of the world is run by reactionary fascists: the rise of solar is unstoppable

Nicolas Fulghum@nicolasfulghum.bsky.social · 4w ago

Solar's sharp rise continues. As of April 2026, global solar capacity now exceeds 3 terawatt. 1 gigawatt → 1 terawatt: 20+ years 1 terawatt → 2 terawatt: 33 months 2 terawatt → 3 terawatt: 19 months

Whenever I work in next.js I just have an uncontrollable urge to throw everything out and rewrite it into a server-rendered html app with a bit of client-side javascript for interactivity.

Trying #ansible for the first time to configure servers, and dang this is a slow tool. Even for very simple cases.

I think language is fluid and ever evolving and so there's no 'incorrect' if a significant group uses language slightly different. [1/2]

Why Drizzle ORM couldn't publish new versions to NPM for a month: www.vlt.io/blog/packume...

Why Drizzle ORM couldn't publish new releases on NPM for a month | vlt /vōlt/

Drizzle ORM recently hit a 100 MB limit in the npm registry and couldn't ship new releases for weeks. What is this limit?

vlt.io

I think I found a way get (at least) fedora with gnome desktops to spin up to 100% CPU usage by broadcasting a MDNS record on the local network. Sounds like a security issue?

woah someone wrote an article about my little homelab side project https://www.xda-developers.com/i-built-a-windows-31-dashboard-for-my-homelab/

We had a power outage from 9pm to 5am last night and i slept like i was on vacation

I was curious what the NPM package with the most releases was, and turns out it's 'electron-remote-control' with 37,328 versions. https://www.npmjs.com/package/electron-remote-control

electron-remote-control

An advanced but easy-to-use remote desktop application with cross-platform support. Latest version: 1.4.4346, last published: a year ago. Start using electron-remote-control in your project by running `npm i electron-remote-control`. There are no other projects in the npm registry using electron-remote-control.

npmjs.com