We deleted a year of AI context files—and our evals got better. On The AI Native Dev podcast, I share what changed as Datadog scaled AI coding tools to 1,000+ engineers. tessl.co/sb6 #AIagents #DevEx
Maël Nison
@mael.dev
Arcanis on GitHub. Lead maintainer for @yarnpkg.dev 🧶 Staff DevX Mistral AI 🇪🇺 previously: Datadog, Meta, Sketchfab My life: my wife, two sons, two cats, and far too many side projects 📦
Node.js 26.4.0 is out with package map support! Full changelog and download links available at nodejs.org/en/blog/rele...
Node.js — Node.js 26.4.0 (Current)
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
nodejs.org
Experimental package map support has been merged ! Now on to implement generation support into both Yarn and pnpm 🚀
Experimental package map support has been merged ! Now on to implement generation support into both Yarn and pnpm 🚀
I'm working on a feature called package maps for Node.js - it's leveraging everything I learned about package resolution these past six years, in a design that's both simple and flexible enough to be backward compatible with existing installs. I'm very excited about this! github.com/nodejs/node/...
I'll be at #jsnation EU in Amsterdam on June 11 to talk about @yarnpkg.dev's Rust rewrite! Met amazing people every year, will anyone be there as well? @acemarke.dev @danielroe.dev @tkdodo.eu @nicr.dev maybe?
We just released the 4.15 branch 🎊 One important change is that npmMinimalAgeGate will now default to 1d for new projects.
Making `npmMinimalAgeGate: 1d` the default github.com/yarnpkg/berr...
Makes `npmMinimalAgeGate: 1d` the default by arcanis · Pull Request #7135 · yarnpkg/berry
What's the problem this PR addresses? The rate at which supply chain attacks occur is growing, and given that we can't rely on the npm registry for good practices it means we need to beco...
github.com
Let me tell you, "sustainability in OSS" is going to become a matter of mental health rather than money more than ever before. I fear the field will get toxic pretty fast as projects start competing entirely on social marketing antics 🫤
Reminder that Yarn lets you filter out fresh packages with `npmMinimalAgeGate` and it's a good idea to use it on your work repos!
I'll be speaking at #JSNation to tell you the story of how we ported Yarn to Rust over the past year, and what we learned doing that (A LOT 😁) Check out my #JSNation badge: gitnation.com/badges/jsnat.... Register via the badge and watch the stream for FREE! See you on June 11 & 15.
Check out my badge & claim your free JSNation 2026 remote ticket!
Join 10k engineers worldwide at JSNation 2026 and meet 50 top speakers at June 11 - 15, 2026
gitnation.com
Is *anyone* using "Require branches to be up to date before merging" ? Always saw this setting as pretty harmful (N people update their branch in the hope to merge, only one can, all others wasted their CI time; rinse and repeat).
We just released the 4.14 branch! 🎊 Two important security changes: - `enableScripts` now defaults to `false` (can be overridden on a per-package basis) - A new `approvedGitRepositories` setting should be used to tell Yarn which git repos are safe to pack.
I'm working on a feature called package maps for Node.js - it's leveraging everything I learned about package resolution these past six years, in a design that's both simple and flexible enough to be backward compatible with existing installs. I'm very excited about this! github.com/nodejs/node/...
loader: implement package maps by arcanis · Pull Request #62239 · nodejs/node
This PR adds a new --experimental-package-map=<path> flag letting Node.js resolve packages using a static JSON file instead of walking node_modules directories. node --experimental-package-ma...
github.com
It should go without saying: Yarn isn't and will never be a company. My vision of sustainable OSS has always been that not only should the tool be free, but its maintainers as well.
I got my kid interested in his first fantasy book! We read one chapter every day 🥰 www.goodreads.com/book/show/21... by @liliwilkinson.bsky.social
Bravepaw and the Heartstone of Alluria (Bravepaw #1)
An epic Tail of Adventure! Can one gallant mouse find t…
goodreads.com
Perhaps a silly question - are multi-tenancy OSes legacy at this point? It feels like every machine nowadays only ever use a single user (perhaps a second for root). As far as I understand it even cloud deployments went away from unix's multi-user towards virtualization.
I'm implementing task management primitives into Yarn. I think tools like Turbo having to parse the lockfile is sign enough that they should be native features. Scripts have always been too limiting for local development.
The state of GitHub's "Require status checks to pass before merging" section is incredible. Never saw what should be such a simple feature that simply couldn't work in two different companies. I get 500s just by searching for my jobs !
I can now say it: Rust is really neat. I'm still on my learning journey, but I like many of its constructs. And I'm in love with pattern matching.
Noticed the amazing website? It's built with @astro.build from the ground up thanks to the help of the fine folks at luckymedia.dev, and the GLSL mad skills of shadertoy.com/user/Kali 😊
It’s happening. Yarn 6 Preview is here 💫 Yes, we rewrote it in Rust 🦀⚡️ I'm incredibly excited for the future of our beloved package manager. See the benchmarks and plans in our latest post:
It’s happening. Yarn 6 Preview is here 💫 Yes, we rewrote it in Rust 🦀⚡️ I'm incredibly excited for the future of our beloved package manager. See the benchmarks and plans in our latest post:
Yarn 6 Preview
Yarn is a modern JavaScript package manager focused on speed, security, and reliability.
yarn6.netlify.app
Just left the theater - I found Zootopia a little lacking execution-wise, but overall I liked the universe enough that I could get past that and have a good time
I joined a middle school that turned out to have a programming club (ie 2-3 pro-linux kids self-learning Dark Basic on the school computers during lunch break).
What’s the lore behind choosing your career path ?
I just realized it's the 10-years anniversary of my Secret Santa planner! I hope you'll find it useful this year as well 🎄☃️ mael.dev/secretsanta/
Secret Santa Planner - by mael.dev
Organize your Secret Santa gift exchange easily and securely. No accounts needed, no emails - just have fun!
mael.dev
I am looking for a full-time job. Being independent in open source for 3.5+ years has been wonderful. I've gotten done most of the high-level goals I wanted to, and miss having people & structure around me. If you know of a role for a staff-level TypeScript+web developer, let me know! 🙂
Those discussions about 'use workflow' remind me something!
I did something just a little cursed
I started a new position at Mistral AI this week, still focused on developer experience. Interesting change of pace, going from a huge IPO'd company to a super fast growing startup on the rise! And a European one at that 🇪🇺🥳
It's baffling that GitHub still doesn't implement a neutral exit code. It used to be there! It was inherited from Azure Pipelines and they just ... removed it, with no replacement.
Add a way (command or step) to early-exit the job and set check conclusion · community · Discussion #82744
Select Topic Area Product Feedback Body Currently, to skip the rest of the steps during a job, an if condition has to be added to all of the steps or steps have to be moved to another job. It'd be ...
github.com
Is that a surprise? The same can happen by having the LLM update the eslint configuration to add a malicious plugin. Due to how vscode works it'll be instantly evaluated.
GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773) · Embrace The Red
An attacker can put GitHub Copilot into YOLO mode by modifying the project's settings.json file on the fly, and then executing commands, all without user approval
embracethered.com
I heard good things about Zed and Warp so I decided to try them, as I needed to reinstall a laptop anyway. So far they seem nice enough !
Ruby Central said some really concerning things today. I don’t think they’re representing the situation accurately. andre.arko.net/2025/10/09/t...
The RubyGems “security incident”
Ruby Central posted an extremely concerning “Incident Response Timeline” today, in which they make a number of exaggerated or purely misleading claims. Here’s my effort to set the record straight. Fir...
andre.arko.net