PRs are _low_, anyone wanna help get the issue count down 👀

Willow (GHOST)@willow.sh · 5mo ago

I take it back

And still growing 💚

Sébastien Chopin@atinux.com · last wk.

It's been almost 10 years, and I'm still in love with @nuxt.com

🧾 Introducing npm.tax Estimate the probability of being impacted by a breach in your npm supply chain. Adjust the knobs to see how slimming your node_modules lowers your risk. Look up a package to see its own risk profile, then share the report, e.g. npm.tax?direct=59&tr.... What's your npm tax?

npm.tax: npm supply-chain risk explorer

Explore how your code, npm dependency count, breach probability, and time horizon combine into cumulative supply-chain risk.

npm.tax

We were looking at some dependency decisions at work today, and let me tell you, the @npmx.dev open compare feature proved to be super useful!!!

new @e18e.dev blog post about when to publish source maps to npm 📦 source maps are often the reason behind bloated install sizes, but sometimes necessary. here we try to explain some of the balance, do/don't

Source maps or not?

Source maps are great for debugging, but should we be shipping them in production?

e18e.dev

What other way to start the day but joy and cringing at watching myself speak. @patak.cat and my talk is up now!! 🧵 www.youtube.com/watch?v=FqdJ...

Matias Capeletto & Willow (GHOST) - npmx: a fast, community-built browser for the npm registry

YouTube video by Local-First Conf

youtube.com

`oxc-walker` v1.1.1 is out. nice work, everyone! 🔥 thanks @harlanzw.com for opening the PR to remove the last dependency - I won't hold it against you that it was a package I wrote. 😭 ... plus some very nice runtime performance improvements from @matejcerny.dev 🔥

npmx is the best thing that happened to npm for a while

Module Federation Nuxt 0.1.0 is out! Module Federation for Nuxt with SSR support. Dynamic remote loading, shared deps, the whole thing. npmx.dev/@module-fed...

@module-federation/nuxt - npmx

Nuxt module for Module Federation using @module-federation/vite

npmx.dev

npm is now scanning packages for malware at publish time before they become available for consumption

npm publish-time malware scanning and dual-use metadata - GitHub Changelog

As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time. This changelog covers what publishers can expect and a new metadata requirement…

github.blog

npmx just joined AT Store. It's a fast, modern browser for the npm registry that makes searching and exploring packages a pleasure with dark mode, keyboard navigation, and code browsing built right in. @npmx.dev

npmx

a fast, modern browser for the npm registry. Search, browse, and explore packages with a modern interface.

atstore.fyi

Today’s Typescript 7 daily release finally includes my contribution to support “emit” via API! Right before the weekend, so I can waste it playing around with it 😛 Thanks @andrewbran.ch tor including it! npmx.dev/package-code...

Code - typescript@7.1.0-dev.20260725.1 - npmx

Browse source code for typescript@7.1.0-dev.20260725.1

npmx.dev

@npmx.dev is not just a browser for packages, it's mostly a reminder that we can take internet back in our hands. You want it, you build it.

@mihaizaurus.at and @felixs.dev giving an overview of @npmx.dev at the first #atproto Vienna meetup

tinyclip 1.0.0 is out! A tiny Node.js library for interacting with the system clipboard, built with @43081j.com. Already used by @astro.build, @nuxt.com and more, it only weights 8kB. If you need clipboard support in Node.js, give it a try: npmx.dev/package/tiny...

Reminder for the atproto x IETF meetup this evening at the Metalab, with an overview on @npmx.dev, Fedisky, beyond plc/web methods within atproto and more, with some vegan curry made in the fabulous kitchen of the Metalab. atmo.rsvp/p/atproto.wi...

atproto x IETF Vienna

For the larger #atproto enthusiasts and builders in Vienna, whether locals or in town for the IETF 126, to exchange about all things atproto.

atmo.rsvp

good timeline. this is magic-string, 140M dls/week. a week ago i asked if it could go ESM only - @sxzz.dev dropped a PR <1 day later 🎉 later, I removed sourcemaps and did 2 big CPU perf speed ups 🚀 love seeing a high impact package like this shrink and speed up

Oh yeah of course I looked up all stats on @npmx.dev npmx.dev/package-time...

Timeline - maplibre-gl - npmx

Version timeline for maplibre-gl

npmx.dev

secret discord server, please ignore…unless you are interested in open source funding 👀 discord.gg/Ay5abGkaxX

Finally joined the cool kids! @willow.sh has merged my first npmx PR, and it's a little atproto one.

feat: add "create new account" button to PDS page by ascorbic · Pull Request #3022 · npmx-dev/npmx.dev

🔗 Linked issue #3021 🧭 Context The current /pds page only has a link to PDS MOOver, with no way to directly create a new account. To create a new account (rather than migrating) a user needs to ope...

github.com

@biomejs.dev has hit the 10M weekly downloads mark 🎉 Thank you! 🫂

We got a few new individual sponsors recently in @e18e.dev - thank you to those of you who are supporting us 🙏 Getting sponsorships for a community is much harder than for a popular web app or dev tool. Every little helps. If you'd like to help us improve perf for all of us, check out our OC 🩵

e18e - Ecosystem Performance - Open Collective

The e18e community has the aim of improving performance of tooling and packages in the JavaScript ecosystem.

opencollective.com

Just delivered a " @nuxt.com Fluffy Cheesecake" to part of the @npmx.dev team with @patak.cat , @graphieros.npmx.social and @matteogabriele.bsky.social

I love that these noodles are a regular reminder that npmx is in the community's hands. @felixs.dev sent a mock of this idea a few days ago, @graphieros.npmx.social nudged them to animate it, and @jviide.iki.fi went full interactive the next day. We can reclaim our tools; we can make them ours.

npmx@npmx.dev · 3w ago

npmx.dev 🤍

We love you, @npmx.dev!

npmx@npmx.dev · 3w ago

npmx.dev 🤍

you can also trust it is the real webpack (if you use mu.social) because they are verified by @npmx.dev. welcome to the atmosphere webpack! we were missing you here 💙

webpack module bundler@webpack.js.org · 3w ago

new platform, who dis? (it's us, webpack!) This is our only account here. You can tell it's actually us because the handle matches our domain (webpack.js.org). anything else claiming to be webpack isn't official.

The latest @dasl/tiles libraries already support this: npmx.dev/package/@das.... Notably, the webtil.es tile loading source supports the data protocol, so anything that embeds on that basis can use it right away.

@dasl/tiles - npmx

All-purpose web tiles library (meta-package re-exporting the @dasl/tile-* libraries)

npmx.dev

Fasten your seatbelt, @vite.dev Module Federation is taking off 🤯

npmx.dev 🤍

About time to reveal who’s been pulling the strings at the @npmx.dev & friends community day in Berlin 🧡 Make sure to join the @npmx.dev guild so that you don’t miss out on the next event: guild.host/npmx #YouCanJustDoThings

Jens Rømer@jensroemer.com · 3w ago

Been hanging out with the wonderful @npmx.dev folks (they are serious when they talk about community!) and a lot of other awesome people this week. What a great conference @localfirstconf.com and thanks to everyone organising!