Tessera
Folgen

patak

@patak.cat

Open Source Adventurer Project Steward @npmx.dev Core @vite.dev @vitest.dev https://elk.zone Director @stewardshiplab.org Advisor @e18e.dev

7923 Posts15944 Follower1233 Folgt
AriPerkkio@ariperkkio.dev · 11h ago

TIL when running Vitest browser mode (or plain Playwright) on Github Actions on Ubuntu, you can skip the slow "playwright install chromium" step completely by providing channel option. This makes Playwright use the pre-installed Chrome. So many projects out there that could speed their CIs with this

Github PR diff view showing removal of "playwright install" step, and addition of "launchOptions.channel: 'chrome'" on Vitest Playwright provider.
patak@patak.cat · 2d ago

if you don't use bsky for a while, the for you feed does wonders to surface good posts, but it degrades quickly as you keep scrolling as it will happily feed you an endless pit of less and less relevant posts. i'd love if it were finite instead. no more, or only from following, below a certain score

Philippe Serhal@philippeserhal.com · 3d ago

🧾 Introducing npm.tax Estimate the probability of being impacted by a breach in your npm supply chain. Adjust the knobs to see how slimming your node_modules lowers your risk. Look up a package to see its own risk profile, then share the report, e.g. npm.tax?direct=59&tr.... What's your npm tax?

npm.tax: npm supply-chain risk explorer

Explore how your code, npm dependency count, breach probability, and time horizon combine into cumulative supply-chain risk.

npm.tax

patak@patak.cat · 4d ago

So bleak. Half of Hungary's electricity will be offline. I didn't know the Danube water level was such a threat to Hungary's nuclear plant. We have been traveling next to it last week and I have never seen it this low. It seems we'll be on water and electricity saving mode for the next few weeks.

Palma Polyak@palmapolyak.bsky.social · 4d ago

Hungary's new government is tested very early. Paks nuclear plant is about to go offline for the first time in 44 years because the Danube is drying up. That's nearly half the country's electricity. Collapsed supply & gas prices spiking throughout the region. Just brutal. apnews.com/article/hung...

danielroe@danielroe.dev · 5d ago

`oxc-walker` v1.1.1 is out. nice work, everyone! 🔥 thanks @harlanzw.com for opening the PR to remove the last dependency - I won't hold it against you that it was a package I wrote. 😭 ... plus some very nice runtime performance improvements from @matejcerny.dev 🔥

a screenshot of the npmx timeline page for `oxc-walker`, showing that the latest release decreased the install size by 96%, removing 12 dependencies, and the previous release also dropped the install size by 46%, dropping 8 dependencies
Vite@vite.dev · 6d ago

Vite 8.2 is out 🚀 • Top-level `input` option: No need to use `build.rolldownOptions` • Warnings for config features the native loader can't handle yet • PostCSS config type export for type-safe configs • Dev URLs now labeled by their interfaces More info in the changelog github.com/vitejs/vite/...

github.com

Andrey Sitnik@en.sitnik.es · 6d ago

While some people laughed about the number of dependencies in the JS world, others worked to improve the ecosystem (like @e18e.dev). Now many of my open source projects have around 20 packages in node_modules, including transitive dependencies.

Bild
Jacob Asper@jacobasper.com · 7d ago

We’ve saved hundreds of gigabytes of bandwidth per month so far! Reach out if you’re interested in helping! We help with outreach, repo modernization, analysis infra, and data analysis

~paul@paulvall.dev · 7d ago

new @e18e.dev effort just kicked off: dieting rust crates 🦀 huge thanks to @jacobasper.com for starting this. we're using the lean crate cargo diet to trim packaged crate sizes across the ecosystem tracking issue: github.com/e18e/ecosystem-issues/issues/280

npm@npmjs.com · last wk.

Strengthening npm supply-chain security: packages are now scanned for malware at publish time, before they can be installed. We're also introducing disclosure for legitimate dual-use tools so they aren't blocked by default. gh.io/npm-publish-...

npm publish-time malware scanning and dual-use metadata - GitHub Changelog

As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time. This changelog covers what publishers can expect and a new metadata requirement…

gh.io