Proud to see the vlt team launch their hosted registries 💪
Darcy Clarke@darcyclarke.me · yesterdayExcited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA! A drop-in npm replacement, built so nothing runs on your machine just because you typed install. → faster delivery → malware blocking at the registry layer → graph-native querying
For the longest time, package namespaces on npm were first-come, first-serve. Typosquats, slopsquats & worms are all downstream of that design. www.vlt.io/blog/slopsqu...
Typosquatting was a spellcheck issue. Slopsquatting is a trust issue. | vlt /vōlt/
Consuming JavaScript packages safely just got more complicated.
vlt.io
HAPPY PMD DAY! 💛 Introducing Pokemon Mystery Dungeon Textbox Generator 1.4! You can now create animated PMD textbox as GIFs! Thou it's still beta, but i wanna share it with you guys, try it now: ignisiumz.github.io/PMD-Text-Box... #pmdday #pokemonmysterydungeon #PMD #mysterydungeon
Blog posts we used to have: “how I reduced latency across several hundred machines by 200 ms by removing two O(n)^2 hot paths” Blog posts we have now: “Here’s how to get the most out of /ultrathink in the latest release of Claudex 3.0.5”
All 8 frameworks and bundlers and package managers going like "we build faster than you"
the market dynamics seem standard. dominant providers want to lock you in. underdogs are more open because it’s their only leverage. users balk at full lock-in, preferring the marginally more open provider. the post shows there are many independent aspects of lock-in to negotiate over
I know what I want, and I want it now I want you, cause I'm Mr. Vain 🔊🎵 #OPL3MIDI
We have some thoughts around what registries could do about that www.vlt.io/blog/slopsqu...
Typosquatting was a spellcheck issue. Slopsquatting is a trust issue. | vlt /vōlt/
Consuming JavaScript packages safely just got more complicated.
vlt.io
I don't understand why people are still hiring product engineers & giving them 10x more work than before. I knew when I was building a terrible product, given timelines that wouldn't make sense. AI endlessly accelerates, churns sanity and makes disposable all kinds of bad bets - it's just tokens
"LLMs mean you don't have to know things, you can just do things" assumes a clean separation that probably doesn't exist. You know what you want to do in part because of what you know / understand
A familiar story: the build crashes, so you rm -rf node_modules && rm package-lock.json, then reinstall to get your dev env back. But once the lockfile's gone, your ^ ranges take over. npm install can grab the newest in-range version of everything: poison included when there's a supply chain attack
Ship JavaScript? Hang onto your lockfile | vlt /vōlt/
Pinning dependencies in package.json won't save you in a supply-chain attack — a committed lockfile does. Here's why, and how to install so it holds.
vlt.io
How I know I still got it? Getting hit on by young ones in liberty village while looking at my phone
🚨⚠️ ATTENTION ⚠️🚨 all you BACKEND 🍑💻 engineers and proDICKtivity 📈🍆 obsessed tech freaks, if you haven't been deep-diving 🤿😩 into Claude at your company yet then sit down 🪑 because daddy AI is here to teach you the 4️⃣ steps to getting your ORGAN-ization 🎹🫦 fully penetrated by artificial intelligence 🤖💦
Dare Obasanjo@carnage4life.bsky.social · 3w agoBoris Cherny’s 5 stages of AI adoption for software teams: Gated: Restricted access to AI. Assisted: 1 agent per dev(high supervision). Parallel: 10 agents per dev(AI codes, humans verify). Autonomy: 100 agents per dev(AI verifies). AI-Native: 1,000+ agents (AI decides what work to do).
I have found one of þͤ most annoying ways to cut down on how many words are in your post. You just use þͤ thorn, representing "th", and combine it with þͤ over-e, letting you replace three letters with merely one!
Pragmatic dev: I'll take what I can get Salesperson: I'll sell what people bite
Wish the people in my life would ambush me, make me admit to being a workaholic, put me in a van, take me some place where they don't let you work
These images of First Nations community members evacuating Collins, Ontario on motorboats are absolutely surreal www.facebook.com/reel/1548244...
Luke LeBrun@lukelebrun.ca · 3w agoThese photos of FNs community members fleeing their homes by boat are genuinely apocalyptic (Photo via Wayne Wastaken of Collins, Ontario, who says his “hometown is gone”) www.facebook.com/share/r/1ArN...
You can't turn back the truth, but you can fix it with hyluronic acid. Alternate with a little retinol. No one has to know!
Tabs vs. spaces is a distraction. The real test is whether you know how to exit vim without closing the Linux terminal 👀
The latest form of code golfing in AI-assisted software dev is how much you can do with as many agents as possible (bonus: locally). I feel like everyone is lying.
Many LLMs have already scanned the entire internet and are still hungry for more. Meta’s patented system would give it unprecedented access to the movements, moods, and interactions of its users. @evystadium.bsky.social has more. @mjgault.bsky.social story: www.404media.co/meta-patents...
Being around really experienced and rigorous ppl is both amazing and intimidating
Being on day three of scouring computer forums and finding somebody who had your same problem but eventually gave up is like seeing a dead body on Everest
Your android / browser / piece of software you use for one single thing has exciting new features! * AI now helps you do Incomprehensible thing! * Thing you would never want to do, now easier with AI! * This one's just us talking about AI again, we know you're not reading these * They pay us