Tessera
Folgen

Ilja

@fubits.dev

Lead Frontend Archeologist @ B2B 🧡 @svelte.dev ambassador 🔗 https://fubits.dev 📍 Co-host https://svelte-berlin.de

3922 Posts1412 Follower332 Folgt
Ben Schwarz@benschwarz.bsky.social · 12h ago

An enormous amount of the world’s CI and automation runs headless Chrome, all of it on x86—until last week. Chrome now ships official arm64 Linux builds. AWS says Graviton uses up to 60% less energy for the same performance. Chrome for Testing coming soon 🥳 calibreapp.com/blog/chrome-...

Chrome lands on arm64 | Calibre

Google has shipped official arm64 Linux builds of Chrome. Here’s where to get them, and why it’s good news for anyone running browser automation.

calibreapp.com

AriPerkkio@ariperkkio.dev · 10h ago

TIL when running Vitest browser mode (or plain Playwright) on Github Actions on Ubuntu, you can skip the slow "playwright install chromium" step completely by providing channel option. This makes Playwright use the pre-installed Chrome. So many projects out there that could speed their CIs with this

Github PR diff view showing removal of "playwright install" step, and addition of "launchOptions.channel: 'chrome'" on Vitest Playwright provider.
Stuart Robson@sturobson.com · 3mo ago

💔 Front-End Developer Seeking Meaningful Contracts Looking for a new partner to elevate your next project? I specialise in front-end architecture and design systems, crafting beautiful user experiences & enhancing legacy code. Let’s make something amazing together! stu@alwaystwisted.com 🙏🖤

A close-up of a printed newspaper-style advertisement featuring various job seekers in the tech industry. The highlighted section reads "Front-End Developer" and states: "Seeking short/mid-term contracts to create stunning user experiences. Expert in CSS, design systems, tokens, and component libraries." The text is surrounded by a red circle for emphasis.
Ilja@fubits.dev · 19h ago

Gosh yeah, reminds me of another lengthy article on JSON blog.dochia.dev/blog/json-is...

JSON is not JSON Across Languages | Dochia CLI Blog

JSON (JavaScript Object Notation) was supposed to be the universal data interchange format that would solve the compatibility nightmares of XML. What looks like astraightforward data format becomes a ...

blog.dochia.dev

Frontend Dogma@frontenddogma.com · 21h ago

Your JSON Is Lying to You, by (not on Mastodon or Bluesky): https://blog.gaborkoos.com/posts/2026-08-03-Your-JSON-Is-Lying-to-You/?ref=frontenddogma.com #json #console #javascript

Jess Rose@jesslynnrose.bsky.social · 24h ago

Really cool remote tech for good job alert! Signal is hiring an android dev: - Global remote working US timezones - Working in Kotlin and Java - Working on open source privacy preserving product - $160,000 - $260,000

Signal Messenger - Android Engineer

Signal is hiring Android developers to help make private communication simple. If you care about code quality as much as you care about user privacy, you should fit right in. This role is an opportunity to have an immediate impact while working closely with a talented team to solve challenging problems and ship new features to millions of users.

jobs.lever.co

Kevin Van Cott@kevinvancott.dev · yesterday

TanStack Table V9 is shipping with a record number of framework adapters from us, with refreshed support for React, Vue, Angular, Solid, Svelte, and Lit, but also brand new support for Preact, Octane, Ember, and Alpine.

Bild
Socket@socket.dev · yesterday

🚨 Update: Watching this npm worm propagate in real time, we’re now tracking 2,234 affected package artifacts across 444 unique packages, and it’s still spreading. Average detection time: 5 min and 18 seconds after publication. Our campaign page includes all affected packages/versions.

Socket@socket.dev · yesterday

🚨 Active npm supply chain attack: keyv​@​6.0.0 and 13 other packages have been compromised. keyv alone gets 154M weekly downloads. The worm steals cloud and CI credentials, then uses stolen npm tokens to publish trojanized versions of more packages.

Andrew Lilley Brinker@alilleybrinker.com · yesterday

Trusted publishing is good, but it's still just an authn method and doesn't mean the package itself is safe to run. Good breakdown by @yossarian.net about that

You shouldn't trust Trusted Publishing

blog.yossarian.net

Feross@feross.bsky.social · yesterday

🚨 Another npm worm is live right now. It landed the same week npm turned on publish-time malware scanning, and after npm killed long-lived tokens in favor of OIDC trusted publishing. It propagates through trusted publishing. keyv@6.0.0 even shipped with passing provenance.

Matze Schmidbauer@schmidbauer.dev · 2d ago

My open data side project made the newspaper today! Berlin's taz tested my cool-places map against the city's official one: ~40 spots around Gendarmenmarkt vs. 2. With 34°C coming tomorrow, that gap matters. hitze.navigator.berlin – stay cool and check on your neighbours. taz.de/Kuehle-Orte-...

Kühle Orte in Berlin: Zuflucht vor dem Hitzeschlag

Die offiziellen Karten, die kühle Orte in Berlin ausweisen, liefern dürftige Ergebnisse. Ein Berliner hat auf eigene Faust etwas Besseres programmiert.

taz.de

Kevin Åberg Kultalahti@kevinak.se · last wk.

It's happening. Previous in-person ones have been amazeballs! Come join us for some amazing community feels. No other conference even comes close.

It's Happening Meme

ALT: It's Happening Meme

static.klipy.com

Svelte Society@sveltesociety.dev · last wk.

Svelte Summit tickets are coming in the next few days 🎟️ Join the launch list and we’ll email you a discount code when they go live. See you in Ljubljana on November 19–20. → sveltesummit.com/ticket-updates

Philippe Serhal@philippeserhal.com · 3d ago

🧾 Introducing npm.tax Estimate the probability of being impacted by a breach in your npm supply chain. Adjust the knobs to see how slimming your node_modules lowers your risk. Look up a package to see its own risk profile, then share the report, e.g. npm.tax?direct=59&tr.... What's your npm tax?

npm.tax: npm supply-chain risk explorer

Explore how your code, npm dependency count, breach probability, and time horizon combine into cumulative supply-chain risk.

npm.tax

Evelyn@kandake.africa · 3d ago

What do you mean nobody wants to join another walled garden social app with real name requirement through a half gigabyte closed source app with a "trust me bro" guarantee for handing over identification?

Ilja@fubits.dev · 3d ago

I have the print copy of the handbook and it’s a must-have for any DataViz practitioner. The ebook price is a steal!

Juuso Koponen@juusokoponen.bsky.social · 2w ago

📊 My and @jhilden.bsky.social’s book has been out of print for some time, as our publisher closed down its general publishing arm. We are working on a 2nd edition, but it is not going to be ready anytime soon, so we’re making the current edition available as an e-book for €9.90. payhip.com/b/zbl43