Santosh Yadav | GDE 🅰️ | GitHub ⭐ | MVP

@santoshyadav.dev

Principal Developer Advocate - Open Source, Google Dev Expert , Github star, MVP Co-Founder Thisis_Learning https://www.youtube.com/@TechTalksWithSantosh https://dev.to/santoshyadavdev views my own

🧾 Introducing npm.tax Estimate the probability of being impacted by a breach in your npm supply chain. Adjust the knobs to see how slimming your node_modules lowers your risk. Look up a package to see its own risk profile, then share the report, e.g. npm.tax?direct=59&tr.... What's your npm tax?

npm.tax: npm supply-chain risk explorer

Explore how your code, npm dependency count, breach probability, and time horizon combine into cumulative supply-chain risk.

npm.tax

VS Code CodeRabbit extension v0.21.2 is live 🚨 > In-IDE reviews now stay connected and reconnect more reliably during longer sessions. > Sign-in flow improved to help you reach the right workspace. Install or update to take advantage of the latest version ✌️

Bild

+ PII leaking into logs. + An auth server error. + A concurrency bug in an idempotency path. CodeRabbit surfaced all three in the systems that protect 1.6M+ customers, before a human even opened the PR. Find out how we managed that (and more use cases) below 👇

Bild

this year i've carved a big chunk of my time out to officially work on OSS. if you like what I do, or use the things I work on, sponsorships go a long way. these help me keep the balance I have, and allow me to dedicate a lot more time to open source. thank you to those who already sponsor me 💙

Sponsor @43081j on GitHub Sponsors

Maintainer of clack, chai, parse5, unjs, vueuse, tinylibs, & more. One of the e18e.dev leads. Core contributor to lit and modernweb.

github.com

Side quest of the day: 🧹mermaid-compact Mermaid is great for diagrams… until noticed this cute thing, pulls in 100+ dependencies (140 MB install), and Vite emits 100+ chunks from the mermaid.esm.min import 😅 No more! The whole thing now bundles into a single ~2.7 MB chunk.

Bild