I am pretty sure I saw @isaacs.bsky.social at lunch today in Vienna and was hoping that he was joining today’s @reactvienna.bsky.social meetup so I can have a chat - Was this my missed „fanboy“ moment? Have you been to Vienna?
Thomas Fritz
@fritzthomas.bsky.social
Platform & Data Team Lead @ Eversports - almost 25 years in web/IT. I’ve survived dial-up, Netscape and IE 5.5. Based in Vienna / Austria 🇦🇹. Personal Website: www.fritzthomas.com Company Website: www.eversports.com
🚨 Active supply chain attack on axios@1.14.1. The latest version pulls in plain-crypto-js@4.2.1 -- a brand-new package that didn't exist before today. We're still investigating. If you use axios, pin your version and audit your lockfile. socket.dev/blog/axios-n...
Supply Chain Attack on Axios Pulls Malicious Dependency from...
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHu...
socket.dev
Glimpsed into „the old world“ over at twitter and the only thing i miss here is @mariozechner.at posting about Pi.dev the same amount here 🥺
Yeahhh. Huge step towards fast Typescript (tsgo)
TypeScript 6.0 is now available! This release brings better type-checking for methods, new standard library features, new module features for Node.js, and more! But most important, this release brings us one step closer to the upcoming native-speed 7.0! devblogs.microsoft.com/typescript/a...
✂️ Knip v6 is out It's finally here, and your favorite slop fighter is already speedier than expected! Can't wait to see y'all tidying up bigger codebases, faster 🚀 Blogpost + release notes: knip.dev/blog/knip-v6 Knip: knip.dev
Does anyone know what's happening at Deno? Many more people are no longer working there since yesterday.
Vite+ @vite.dev is looking so good already. But what about support for Astro and Nuxt or basically every meta framework which does not expose a vite.config.ts but is shimming it with their own config? Wondering if those frameworks should move to a vite.config.ts or if viteplus should support them?
Love his take in his videos. I think his spot on. It’s fun, and he gets a bit dystopian as well, which I like: youtube.com/@atmoio?si=W...
Mo Bitar
Exploring what AI actually is. I’m currently building Shape (shape.work), a radically simple workspace for teams. Previously I created Standard Notes, which was acquired by Proton in 2024. I'm availa...
youtube.com
Why did Amazon kill the Kindle Oasis? It was the only option left if you wanted actual tactile, real buttons for turning a page. I could never get used to touching the display for turning a page. It felt even more uncanny.
It is *fascinating* to me how quickly some people have gone completely from “we all must work in the office! human collaboration is vital and only happens in person!” to “I can replace all these pesky people with chatbots!” Definitely some commentary there about our society and who gets to choose.
Yay. Finally some js goodness after so many years of waiting
JavaScript's new Date-Time API was standardized two days ago 🎉 Here's an interview with @ptomato.name @jason-williams.co.uk & Andrew Paprocki on the creation of Temporal 📮 www.bloomberg.com/company/stor...
Announcing Oxfmt Beta * 100% Prettier Compatibility * Additional File Formats * Tailwind CSS Integration * Import Sorting * package.json Sorting * Embedded Language Formatting * Node.js API * `--migrate prettier` * config overrides * Full IDE support oxc.rs/blog/2026-02...
Oxfmt Beta
A collection of high-performance JavaScript tools written in Rust
oxc.rs
🚨 Missed our big announcement yesterday? We launched schemabenchmarks.dev! 🎉 An open-source project comparing top JS schema libraries like @zod.dev, @valibot.dev, @arktype.io, Typia, TypeBox, Effect and more. 🧩
Introducing Deno Sandbox ⭐ Instant Linux microVMs ⭐ TypeScript and Python (!) SDKs + REST API ⭐ Secure against prompt injection attacks deno.com/blog/introdu...
Introducing Deno Sandbox | Deno
Instant Linux microVMs with defense-in-depth security for running untrusted code.
deno.com
Question to @deno.land users: are you using deno builtin lint and format or other external tools like biome, Oxc, or eslint, prettier ?
There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it. A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately. react.dev/blog/2025/12...
Critical Security Vulnerability in React Server Components – React
The library for web and native user interfaces
react.dev
That's a significant win for both Angular and the Vite ecosystem, ultimately benefiting all Vite-based frameworks, meta frameworks, and libraries.
⚡️Finally! The official statement! @vitest.dev is now the official #Angular #testing framework 💪
I just had the pleasure of test running @alem.forge42.dev 's first React Router workshop today with him, before the official one tomorrow. He did a great job with the workshop, and it was a pleasure to go through it with him. To all participants tomorrow: Enjoy the learning experience, have fun!
Omg the more I see from @astro.build, the more I love it. It’s the framework I would have wanted to create if it didn’t exist. Fonts, Images, CSP, sessions ,… it’s just right.
I don't write Python, but I highly respect and acknowledge that: pyfound.blogspot.com/2025/10/NSF-... Congratulations to the PSF for making that decision. Many other companies and open-source projects should demonstrate some of that backbone!
The PSF has withdrawn a $1.5 million proposal to US government grant program
pyfound.blogspot.com
The existence of this video is VEEEERY frightening imho youtu.be/pVBKWLkRqXw „Formatting JSON using AI“ „Extracting phone numbers from a text using AI“ „Uppercasing a string using AI“ 🫣😭🤦♂️ Thanks @w3cj.com for pointing out the „should be obvious“ things in your video.
Stop Using AI For This
YouTube video by Syntax
youtu.be
This weekend was a delightful and blissful time spent with my brother and niece. It felt like healing, even though I wasn’t aware that I was broken ❤️🩹. Love you 🥰
Most companies have similar business needs for their software, but not all needs are met equally IE: Error handling. Critical for biz needs. Yet so many companies I've seen absolutely neglect it. Why? Not enough engineers focusing on that discipline Get good at that stuff and you'll be unstoppable
I’m concerned that I overdid myself during Leg Day, as my feet are burning so intensely that I can barely sit, stand, or walk 😅😂😂
Hot take: Next.js has become overly complex, even for an enterprise. It lost its identity. Look for simpler alternatives (enterprise friendly) Content with JS? Choose @astro.build or @nuxt.com Fully SPA? Go for @tanstack.com Roll your own? @vite.dev and its ecosystem got you