Maël Nison

@mael.dev

Arcanis on GitHub. Lead maintainer for @yarnpkg.dev 🧶 Staff DevX Mistral AI 🇪🇺 previously: Datadog, Meta, Sketchfab My life: my wife, two sons, two cats, and far too many side projects 📦

A

We just released the 4.15 branch 🎊 One important change is that npmMinimalAgeGate will now default to 1d for new projects.

Let me tell you, "sustainability in OSS" is going to become a matter of mental health rather than money more than ever before. I fear the field will get toxic pretty fast as projects start competing entirely on social marketing antics 🫤

Reminder that Yarn lets you filter out fresh packages with `npmMinimalAgeGate` and it's a good idea to use it on your work repos!

Is *anyone* using "Require branches to be up to date before merging" ? Always saw this setting as pretty harmful (N people update their branch in the hope to merge, only one can, all others wasted their CI time; rinse and repeat).

We just released the 4.14 branch! 🎊 Two important security changes: - `enableScripts` now defaults to `false` (can be overridden on a per-package basis) - A new `approvedGitRepositories` setting should be used to tell Yarn which git repos are safe to pack.

I'm working on a feature called package maps for Node.js - it's leveraging everything I learned about package resolution these past six years, in a design that's both simple and flexible enough to be backward compatible with existing installs. I'm very excited about this! github.com/nodejs/node/...

loader: implement package maps by arcanis · Pull Request #62239 · nodejs/node

This PR adds a new --experimental-package-map=<path> flag letting Node.js resolve packages using a static JSON file instead of walking node_modules directories. node --experimental-package-ma...

github.com

It should go without saying: Yarn isn't and will never be a company. My vision of sustainable OSS has always been that not only should the tool be free, but its maintainers as well.

Perhaps a silly question - are multi-tenancy OSes legacy at this point? It feels like every machine nowadays only ever use a single user (perhaps a second for root). As far as I understand it even cloud deployments went away from unix's multi-user towards virtualization.

I'm implementing task management primitives into Yarn. I think tools like Turbo having to parse the lockfile is sign enough that they should be native features. Scripts have always been too limiting for local development.

The state of GitHub's "Require status checks to pass before merging" section is incredible. Never saw what should be such a simple feature that simply couldn't work in two different companies. I get 500s just by searching for my jobs !

I can now say it: Rust is really neat. I'm still on my learning journey, but I like many of its constructs. And I'm in love with pattern matching.

Just left the theater - I found Zootopia a little lacking execution-wise, but overall I liked the universe enough that I could get past that and have a good time

I am looking for a full-time job. Being independent in open source for 3.5+ years has been wonderful. I've gotten done most of the high-level goals I wanted to, and miss having people & structure around me. If you know of a role for a staff-level TypeScript+web developer, let me know! 🙂

I started a new position at Mistral AI this week, still focused on developer experience. Interesting change of pace, going from a huge IPO'd company to a super fast growing startup on the rise! And a European one at that 🇪🇺🥳

I heard good things about Zed and Warp so I decided to try them, as I needed to reinstall a laptop anyway. So far they seem nice enough !