Mathis Hofer
@hupf.bsky.social
Irgendwo zwischen technikaffin, weltinteressiert, gesellschaftskritisch und musisch begabt. Fediverse: https://tooting.ch/@hupf
🚀Rolldown 1.0 is here!🚀 Rust-based high-performance JavaScript bundler. 🏎️ Runs at native speed that’s up 30x faster than Rollup 🤝 Compatible with existing Rollup & Vite plugins ⚡The underlying bunder for Vite After 2 years, Rolldown is officially stable and has 20+M weekly downloads.
Webpack builders are being deprecated in the @angular.dev CLI for v22 🫡 github.com/angular/angu...
Several deprecations by alan-agius4 · Pull Request #33127 · angular/angular-cli
github.com
We at TanStack just had a major attack against our Router packages. We have a postmortem out now explaining what happened and how we mitigated the response: tanstack.com/blog/npm-sup... No other TanStack packages outside of the Router monorepo were impacted
Postmortem: TanStack npm supply-chain compromise | TanStack Blog
On 2026-05-11, an attacker chained a pull_request_target Pwn Request, GitHub Actions cache poisoning across the fork↔base trust boundary, and OIDC token extraction from runner memory to publish 84 mal...
tanstack.com
⚡️ Vite 8.0 is here! The most significant architectural change since Vite 2. ⏬ Powered by @rolldown.rs bringing faster production builds and more consistency 🛤️ New features such as tsconfig paths and emitDecoratorMetadata support vite.dev/blog/announc...
Vite 8.0 is out!
Vite 8 Release Announcement
vite.dev
I just noticed that @lit.dev crossed the 5M downloads/week mark on npm! 🎉 That's more than 2x in the last year, and 6x in the last three years 🚀
Yes, #Nitro v3 Beta is here 🎉 Thanks to @pi0.io and everybody who was involved 🙏 nitro.build/blog/v3-beta
Nitro v3 Beta is here! - Nitro
Nitro v3 is now available as a public beta — a ground-up evolution of the server framework, built around web standards, Rolldown, Vite v8, and the same deploy-anywhere promise.
nitro.build
Am Dienstag, 3 März, werde ich an den #BärnerJS Talks #26-1 einen Vortrag zum Thema «Moderne #TypeScript -Backends mit #Nitro & #CleanArchitecture» halten. Komm vorbei, wenn du Lust hast. Es würde mich freuen bei Pizza & Bier zu plaudern. Details und Anmeldung hier: www.meetup.com/barner-js-ta...
Oh noooo, the company that extracted our data for their models is having others extracting data for their models
![why is this not type-safe AGAIN ?? Stop with the string[] and the path as any, you should know by now...](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:3nqrhu5mthmias3zc4a2ovzj/bafkreic3avwzdwlvqcpy7dgbpkfr2wjn36sqvf5mx4yvt5due4363fkdy4)
The door is open a crack and the wind is blowing... media.ccc.de/v/39c3-a-pos... #enshitification #39c3
A post-American, enshittification-resistant internet
Trump has staged an unscheduled, midair rapid disassembly of the global system of trade. Ironically, it is this system that prevented all...
media.ccc.de
We've got some updates on TypeScript 7! The new native port - can type-check any project - supports --build and --incremental - has rich editor features implemented - is still 10x faster and is ready for you to try today! devblogs.microsoft.com/typescript/p...
Progress on TypeScript 7 - December 2025 - TypeScript
Earlier this year, the TypeScript team announced that we’ve been porting the compiler and language service to native code to take advantage of better raw performance, memory usage, and parallelism. Th...
devblogs.microsoft.com
Yesterday I've replaced the battery and the wonky 3.5 mm audio jack of my 5 year old @fairphone.com with nothing more than a screw driver and a perfect instruction video by the manifacturer. I hope one day such an experience will be normal with all kinds of technical devices... 🌎🔧 #sustainability
I'm using tsgo + oxlint + oxfmt for the first time. It's all *so fast*. Small project (~1k loc, ~10 files), but type checking in 90ms, building in 60ms, linting in 70ms, and formatting in 80ms is fantastic. 🚀 The future of web dev tooling is bright. Nice work @typescriptlang.org and @voidzero.dev!
Mozilla und 44 weitere Akteure fordern Macron, Merz und von der Leyen ihr Auge auf Open-Source zu lenken. Dies geschieht im Voraus auf den Gipfel zur europäischen digitalen Souveränität, der nächste Woche stattfindet.
Breite Allianz fordert von EU Ausbau von Open Source
45 europäische Akteure aus Wirtschaft und Zivilgesellschaft fordern die Regierungen der EU auf, die Präsenz von Open Source auszubauen.
inside-it.ch
Does widespread browser implementation of the Sec-Fetch-Site HTTP header mean we can protect against CSRF attacks without needing those hidden form tokens? It looks like the answer may be a cautious "yes"! simonwillison.net/2025/Oct/15/...
A modern approach to preventing CSRF in Go
Alex Edwards writes about the new http.CrossOriginProtection middleware that was added to the Go standard library in version 1.25 in August and asks: Have we finally reached the point where …
simonwillison.net
Lit is joining @openjsf.org! 🎉 Today at JSConf, The OpenJS Foundation announced Lit is officially joining as an Impact Project! We're beyond excited for this move and look forward to continuing our work to build the open web with OpenJS! Read more on our blog: lit.dev/blog/2025-10...
Lit is Joining the OpenJS Foundation!
Lit is officially joining the OpenJS Foundation as an Impact Project!
lit.dev
I didn't know that streamed decompression of ZIP files isn't actually possible. But streamed compression is totally fine though. This is an interesting article explaining why: dev.to/pavel-zeman/...
The Pitfalls of Streamed ZIP Decompression: An In-Depth Analysis
Wikipedia says it clearly: "Tools that correctly read ZIP archives ... must not scan for entries from...
dev.to
Heck yeah! The @nitro.build v3 beta is out now. And Nitro is now just a @vite.dev plugin 👀 Kudos to all contributors, @unjs.io, and @pi0.io 🙌🏻
Dr. Jane Goodall filmed an interview with Netflix in March 2025 that she understood would only be released after her death.
KI frisst Strom: Bis 2028 wird über 50% der Energie in Rechenzentren für KI verbraucht - sagt die MIT Technolgy Review. Das kleinste Meta-Modell braucht 57 Joule pro Antwort, das grösste 3’353 Joule. Der Energiehunger explodiert. #KI #Energiehunger www.technologyreview.com/2025/05/20/1... 1/3
show this to anyone else you know who also assumed DHH was just a normal conservative dude rather than a raging white supremacist lunatic
DHH Is Way Worse Than I Thought | jakelazaroff.com
DHH's politics are not normal. Maybe they used to be, I don't know, but as of right now the dude is_way outside of what most people would consider moral or acceptable.
jakelazaroff.com
On one side, this shows the importantance that Nuxt gained. On the other side, I don't like this concentration and I especially don't like Vercel and its CEO...
NuxtLabs@nuxtlabs.com · last yr.We are excited to announce that NuxtLabs is joining @Vercel.com to pursue our mission on creating the best DX to deliver the best UX. Read more at nuxtlabs.com
🚀 Nitro v3 routing is fully compiled now! ✅ Smaller bundles ⚡ Faster performance 🛠️ More flexibility (extendable route rules) No runtime router — just minimal compiled logic. More to come 👀 github.com/nitrojs/nitr...
Verstehe ich das richtig: 1 Faschist ermordet 1 Faschisten, weil der ihm nicht faschistisch genug ist, aber wir sollen über Linksradikalismus reden?
pnpm v10.16.0 adds "minimumReleaseAge", a setting for defining how long a version has to have been published before pnpm will install it. A nice countermeasure against accidental installs of short-lived compromised packages before they get taken down. Not a 100% fix, but a great additional step!
Release pnpm 10.16 · pnpm/pnpm
Minor Changes There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new settin...
github.com
