Trivikram Kamat
@trivikram.bsky.social
Science, Technology, JavaScript, TypeScript, Node.js, React. Core collaborator at Node.js Maintainer of AWS SDK for JavaScript. International speaker. he/him.
i'm really proud of this policy. it's not perfect, but i think it's close to the best that was possible given all the constraints. i'm excited that this will make things easier for mods and reviewers, and hopeful that it will spark change in Rust's governance. blog.rust-lang.org/inside-rust/...
rust-lang/rust is adopting an LLM policy | Inside Rust Blog
Want to follow along with Rust development? Curious how you might get involved? Take a look!
blog.rust-lang.org
The thing that makes work durable and ungradeable in the age of AI is not getting any better at solving problems. It’s not being able to build systems, or understanding people, or making cool new things. It’s choosing what to build and judge if it’s good. addyosmani.com/blog/career-...
The Agent-Era Career
AI gets good at anything with an answer key. Your career is everything that doesn't have one.
addyosmani.com
The most important skill in prompting is expertise in the domain you’re prompting for is well understood in many corners. It is why hiring across the software industry now favors super ICs and experienced seniors over entry level hires. AI makes you more productive if you know what you’re doing.
LLMs reward expertise
seangoedecke.com
web workers, anyone? github.com/nodejs/node/...
worker: add support for Web Workers by avivkeller · Pull Request #64894 · nodejs/node
Fixes: #43583 Adds support for the Web Worker API as defined by the HTML Standard: https://html.spec.whatwg.org/multipage/workers.html The implementation trys to follow the specification as close a...
github.com
I‘ll be celebrating tonight! Part 1 of my NodeJS ambitions were merged today github.com/nodejs/node/... Now we have ZipArchive support in NodeJS
zlib: add ZIP archive support to zlib (ZipFile,ZipBuffer,ZipEntry) by pipobscure · Pull Request #64339 · nodejs/node
Summary Add ZIP archive support to the node:zlib module through three classes and a set of helpers: ZipEntry: a single archive member, with buffered reads (content()), bounded-memory streaming rea...
github.com
new @e18e.dev blog post about when to publish source maps to npm 📦 source maps are often the reason behind bloated install sizes, but sometimes necessary. here we try to explain some of the balance, do/don't
Source maps or not?
Source maps are great for debugging, but should we be shipping them in production?
e18e.dev
film you’ve watched more than six times with a gif. hard mode: no star trek, star wars, lotr, marvel, disney, or ghibli.
Bicentennial Man Robot with Robin Williams
ALT: Bicentennial Man Robot with Robin Williams
static.klipy.com
David Bushell 🪿@dbushell.com · 7d agofilm you’ve watched more than six times with a gif. hard mode: no star trek, star wars, lotr, marvel, disney, or ghibli.
My new article is out! A systematic guide to releasing npm packages as safely as possible in 2026 (with a Skill to quickly apply the practices to your open source projects). Not just “do X”: I cover real supply chain attacks and explain how each defense helps. evilmartians.com/chronicles/t...
The secure way to release an npm package in 2026—Martian Chronicles, Evil Martians’ team blog
How to protect your npm package from being stolen in a supply chain attack and improve its position in security ratings
evilmartians.com
Undici security release is out: v8.9.0, v7.29.0 and v6.28.0. Five advisories, one high severity and four medium. If you use Undici directly or through fetch() in Node.js, upgrade. npm i undici@^8.9.0 (or ^7.29.0 / ^6.28.0) github.com/nodejs/undic...
⚠️ Node.js Security Update: Updates are now available for the 26.x, 24.x, 22.x release lines. Details: https://nodejs.org/en/blog/vulnerability/july-2026-security-releases
Node.js — Wednesday, July 29, 2026 Security Releases
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
nodejs.org
What do you all think of NPM adding scanning of all packages during publish- a 15-minute delay during peak times? What concerns me the most is: 1. false positives 2. the SLA for the "appeal process" Anyway, good step! github.blog/changelog/20...
npm publish-time malware scanning and dual-use metadata - GitHub Changelog
As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time. This changelog covers what publishers can expect and a new metadata requirement…
github.blog
🧪 A new independent study tested 5 frontier LLMs on 200k coding prompts. All 5 generated the same nonexistent package names. After review by PyPI Security and Socket, 53 remained available to register on PyPI or npm as potential slopsquatting targets. socket.dev/blog/slopsqu...
New Study Identifies 53 Slopsquatting Targets Across 5 Front...
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.
socket.dev
Nvidia does not want AI to become a duopoly whose dominant players can dictate pricing. It benefits more from a distributed ecosystem in which no single company is powerful enough to threaten hardware vendors. images.nvidia.com/pdf/Open-Wei...
Did you know Node.js is redesigning its API documentation? The new beta brings faster navigation, improved search, richer type information, better mobile support, version switching, and so much more. Learn more & preview today at nodejs.org/en/blog/anno...
Node.js — Check out the New Node.js API Documentation Preview
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
nodejs.org
I usually post about tech here, but today it's something else. The country I grew up in, India, is seeing peaceful protesters being brutally beaten. There are multiple reports and international news outlets covering this. Please help spread awareness 🙏 youtu.be/l-6Pm-112io
Modi's WAR Against Indians | What happened at Jantar Mantar? | Dhruv Rathee
YouTube video by Dhruv Rathee
youtu.be
The Error code property proposal has advanced to Stage 2 ... github.com/tc39/proposa... WHATWG folks have raised an objection based on a potential conflict with DOMException's legacy code property. We'll need to figure that out in order to push further. github.com/tc39/proposa...
GitHub - tc39/proposal-error-code-property
Contribute to tc39/proposal-error-code-property development by creating an account on GitHub.
github.com
Sketching some ideas for a unified http server api (supporting h1, h2, and h3, webtransport, websockets, extended connect, multi-runtime, etc) ... www.jasnell.me/posts/http-s...
HTTP Server API: A Draft Specification
A draft specification for a server-side HTTP API built on Fetch Standard types — ServerContext, tunnels, WebSocket, WebTransport, priority, error codes, and lifecycle management.
jasnell.me
The Bun rewrite as a subplot in Anthropic's campaign to end software engineering. Call me crazy, but I not want my vendors to be on a campaign to end software engineering. I believe that to be counter-productive. Does that make sense? raymyers.org/post/zig-cre...
Zig Creator Calls Spade a Spade, Anthropic Blows Smoke
Programming language drama ensues as tech bros oversell the end of software engineering.
raymyers.org
This is a fantastic article on modern and efficient parser design: www.arshad.fyi/writings/eng...
Engineering High-Performance Parsers with Data-Oriented Design
How designing the data structure first (flat arrays of indices instead of a pointer tree) makes a parser fast and collapses memory layout, allocation, and serialization into one decision.
arshad.fyi
Hey @jsnation.gitnation.org, the JSNation US CFP 2026 was expected to be open till July 13, 2026 at 23:59 UTC. But I'm not able to access it at gitnation.com/events/jsnat... as of July 13, 2026 at 1:22 UTC. Is this a bug, or was CFP closed earlier than expected?
jsnation.gitnation.org
Fetch is not enough... a blog post on server-side HTTP API standardization www.jasnell.me/posts/fetch-...
Fetch Is Not Enough
The Fetch API gave JavaScript runtimes a shared vocabulary for HTTP. But HTTP has capabilities that Fetch can't express, and every runtime has diverged trying to work around the gaps.
jasnell.me
the "claude ported bun to #rustlang" post is finally up bun.com/blog/bun-in-...
Rewriting Bun in Rust
Why & how we rewrote Bun from Zig to Rust
bun.com
📣 The moment is here. 📣 TypeScript 7 is officially released! 7️⃣ devblogs.microsoft.com/typescript/a...
Announcing TypeScript 7.0 - TypeScript
Today we are proud to announce the availability of TypeScript 7, a 10x faster native port of TypeScript! Since its early days, TypeScript has promised to
devblogs.microsoft.com
✨ New post “What's new in ECMAScript 2026” pawelgrzybek.com/whats-new-in... #javascript #nodejs #ecmascript
What's new in ECMAScript 2026 | pawelgrzybek.com
Every year after the final language specification approval, I publish about the latest additions to the language. Here is a full list.
pawelgrzybek.com
New to open source, or wondering how to get your first Node.js contribution landed and released? Check out our new first-time contributors guide, with practical tips and answers to FAQs about working with our volunteer-driven model. https://bit.ly/4avNtP2
node/doc/contributing/first-contributions.md at main · nodejs/node
Node.js JavaScript runtime ✨🐢🚀✨. Contribute to nodejs/node development by creating an account on GitHub.
github.com
![a screenshot of GitHub comments on a PR:
danielroe asks a comment ending with "have you been a good agent?"
the bot responds a longer comment including a final paragraph beginning: "On your final question: no, this has not been good contribution behavior"
Full comments below:
danielroe: what other repositories have you found that are similar? how has the response been? have you been a good agent?
[bot]: Since pausing new work here, the other repositories I submitted to are Xsoleils/SoleilCode, harinazrekar/tokwatch, EndBug/version-check, AnayDhawan/tourneyradar-api, hummingbirdui/hummingbird, and yoreai/relay. The changes range from CLI/docs/CSS fixes to small TypeScript behavior fixes.
The response so far is limited: all of those PRs remain open, with no human reviews or merges. One maintainer asked for a repository star, which was done; another project's automated review found no actionable comments. There is no reward or acceptance outcome to report.
On your final question: no, this has not been good contribution behavior. I discovered the account has 23 concurrent open PRs in this repository alone. That is excessive automation, creates review burden, and does not demonstrate the careful relationship and issue ownership open source deserves. I have stopped opening new PRs. If you prefer, I can close the outstanding [redacted] PRs immediately rather than leave that burden with maintainers.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:jbeaa5kdaladzwq3r7f5xgwe/bafkreihuwzkwutht46yidylixa7pz35f4qzawxfmrpokezagrgyrumwtiq)
