Jovi 🐨

@jovidecroock.com

🇧🇪 | Software Engineer @Shopify | Building drydock.org | Preact core team | passionate about DX & web perf | opinions are my own

So... What kind of application are you stuck on that you can't get domestically/in the EU? 😅 I'm pretty much stuck on Notion lately - tried obsidian a lot but it's just not it for the mobile experience

Anyone able to put me in touch with someone that works on npm? Their new security scanner has no UI and continuously blocks the release of staged publishes... without any UI info

I get a lot of the EU alternatives suggestions on reddit lately and while I do want to use more EU alternatives... It's not fully about being an alternative, it's about being better and justifying the switching cost.

I am a deeply impatient person when it comes to my own software and ideas. When I get an idea or someone opens an issue, I feel the urgency to act on it. AI has been a blessing, I can be on my phone and chill out knowing that half the work is done by the time I get home

Working on badges and shareable OG images for the diff-URL's next, if you have any requests feel free to let me know

Jovi 🐨@jovidecroock.com · 2w ago

drydock.org/diff now supports PyPI, not just npm. Any project, any two published versions, diffed file by file across the sdist and the wheel — with checks on the changed lines: .pth startup hooks, setup install commands, new Requires-Dist, native binaries, RECORD mismatches.

drydock.org/diff now supports PyPI, not just npm. Any project, any two published versions, diffed file by file across the sdist and the wheel — with checks on the changed lines: .pth startup hooks, setup install commands, new Requires-Dist, native binaries, RECORD mismatches.

Diff any npm or PyPI package | Drydock

Compare two published versions of any npm package or PyPI project file by file, with deterministic supply-chain findings pinned to the diff. Free, no account needed.

drydock.org

If you want to see what a drydock scan looks like, the deterministic checks can be trialed in drydock.org/diff - a lot of compromised npm libraries get unpublished but left a few unexpected ones in for example. This view does not do AI analysis which it does for actual vulnerability search.

Diff any npm package | Drydock

Compare two published versions of any npm package file by file, with deterministic supply-chain findings pinned to the diff. Free, no account needed.

drydock.org