Thomas Fritz

@fritzthomas.bsky.social

Platform & Data Team Lead @ Eversports - almost 25 years in web/IT. I’ve survived dial-up, Netscape and IE 5.5. Based in Vienna / Austria 🇦🇹. Personal Website: www.fritzthomas.com Company Website: www.eversports.com

🚨 Active supply chain attack on axios@1.14.1. The latest version pulls in plain-crypto-js@4.2.1 -- a brand-new package that didn't exist before today. We're still investigating. If you use axios, pin your version and audit your lockfile. socket.dev/blog/axios-n...

Supply Chain Attack on Axios Pulls Malicious Dependency from...

A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHu...

socket.dev

Vite+ @vite.dev is looking so good already. But what about support for Astro and Nuxt or basically every meta framework which does not expose a vite.config.ts but is shimming it with their own config? Wondering if those frameworks should move to a vite.config.ts or if viteplus should support them?

Why did Amazon kill the Kindle Oasis? It was the only option left if you wanted actual tactile, real buttons for turning a page. I could never get used to touching the display for turning a page. It felt even more uncanny.

It is *fascinating* to me how quickly some people have gone completely from “we all must work in the office! human collaboration is vital and only happens in person!” to “I can replace all these pesky people with chatbots!” Definitely some commentary there about our society and who gets to choose.

I just had the pleasure of test running @alem.forge42.dev 's first React Router workshop today with him, before the official one tomorrow. He did a great job with the workshop, and it was a pleasure to go through it with him. To all participants tomorrow: Enjoy the learning experience, have fun!

Most companies have similar business needs for their software, but not all needs are met equally IE: Error handling. Critical for biz needs. Yet so many companies I've seen absolutely neglect it. Why? Not enough engineers focusing on that discipline Get good at that stuff and you'll be unstoppable

For a basic crud app, you have "must haves", "Nice to haves", and "Polish". In each are different skills, like "Data fetching" or "Remote logging". These skills are differently weighted between how often a company does them and how valuable they are for individuals to have as skills on a team.