It seems npm scans aren't good enough 🫣

I feel like the config file situation in JS-land has gotten out of hand. Tools check for {.config/tool,.toolrc,config.tool}.{cjs,js,mjs,cts,ts,mts,json,jsonc,json5,yaml,yml,toml} That’s 3*12=36 locations to check.

I wrote this bit on preventing prototype pollution dev.to/naugtur/but-... in response to @nodeland.dev 's recent post where he claimed we can't. It's all about pronouns. 😜

But _We_ Can Harden Node.js Against Prototype Pollution

This is a response to a post by Matteo Collina Define We Matteo's post argues that...

dev.to

אני לא מרגיש שעומדת לפרוץ מלחמה כי אני לא רואה חדשות?

Do you think the people from the “we don’t need to read code anymore” are okay with a medical device installed in their body that no one read its code?

AI actually didn’t change the speed of computers, nor networking, and even speed of light is the same. Saying “your code is matter less because of AI” is just an excuse for being lazy to supervise the code generated by AI

The problem with static and dynamic imports is that it’s a manual based decision

נראה לי שבסולם של 1 עד 10, הוא מקבל 100 בכמה שהוא @#!@#!%!

I think I found a hack for async context in the browser

I think bundlers that chunk only by imports are limited. Ignoring partial evaluation as Closure Compiler does. If we would flat all modules both static and dynamic, and dividing to chunks by async operations as code called on fetch result, we probably get more optimize chunks

“Fetch Needs Error Codes” by @jasnell.me www.jasnell.me/posts/fetch-...

שואבים אבק ללא הפסקה בכיכובה של הכלבה שלי

I think the issue of having an App component with 200 context providers is the fact most places of the app probably won't need them. This is why lazy initialization of services make more sense as happen in some frameworks

I really want to understand why some devs really love one framework while others really love another framework. Not the technical reasons, the psychological reasons. If technical reasons become irrelevant they won’t replace their framework

The $165K cost of porting Bun from Zig to Rust isn’t a development cost. It’s a marketing cost

Today I learn, you can decrease your bundle size in a meaningful size, but the compress size will go bigger 😅

Did someone use manualChunks and got more optimal bundle?

Does someone have a good way to detect why some file bundled in some chunk in Vite? Can’t find good tooling for that and I comment code and build to debug

רציתי לכתוב משהו סרקסטי על התקרובת ישראל לרמת הדמוקרטיה הרוסית ששם שולחים צעירים למות במלחמה אין סופית כי השליט צריך לבצר את כסאו, ואז נזכרתי

היום בתל אביב כמות חריגה של בנות שהולכות בטופ ואני תוהה אם זו מחאה בעקבות מה שקרה בערך לפני כשבוע

JS folks. Are there any good tools to inspect what is the route from entry to some import?

AI companies claim the “code is a solved problem”, but for now I see that “money is a solved problem” (from their perspective)

Skills are what make your private tools into public tools

כשהגעתי למשרד השבוע, אמרתי שלום לאיזה כלב ובני אדם חצופים חשבו שדיברתי אליהם

I really like Bluesky doesn’t have an AI agent

I swear 65,532 is smaller than 65,534

There is something very ironic about international corporations that they try to explain you how they’re global and doing all local adjustments while they’re actually doing everything from an American perspective 🤷‍♂️

I find this video fascinating. Someone goes around Nuuk, Greenland, travel and just talk to the locals about their life in this remote place youtu.be/B854jII8Mm0

Life In Greenland's Only City

YouTube video by From Here to There

youtu.be

Never ever in my life I thought I would get blocked by JavaScript string length limitation

What if we treat each top level symbol as a module instead? Bundle result can improved dramatically for big webapps