AI will not replace humans... humans will retire first to avoid reviewing and fixing this endless slop :D
@svelte.dev is finally on Adopt Ring within Technology Radar www.thoughtworks.com/radar/langua..., so go and adapt!
Svelte | Technology Radar | Thoughtworks
Svelte is a JavaScript UI framework that compiles components into optimized JavaScript at build time rather than relying on a large browser-side runtime or virtual [...]
thoughtworks.com
Ok, it’s time to find your favorite package on @npmx.dev and be the first person who liked it
Worked on this tool over weekends last months. The idea is simple: mark some scripts with type=“text/whyrify” (partytown-like) so eventually engine will block that scripts from execution, then measure impact of the faults using Bayesian stats. The engine is open-sourced github.com/whyrify/whyr...
Whyrify@whyrify.bsky.social · 6mo agoWe're live whyrify.com Happy fault injection!
A critical vulnerability in React Server Components (CVE-2025-55182) affects React 19 and frameworks, including Next.js (CVE-2025-66478). All users should upgrade to the latest patched version in their release line. nextjs.org/blog/CVE-20...
Security Advisory: CVE-2025-66478
A critical vulnerability (CVE-2025-66478) has been identified in the React Server Components protocol. Users should upgrade to patched versions immediately.
nextjs.org
Sharing conversations with LLM as research/explanation/fact/solution is a broken communication pattern. Also, “AI suggested it” is a worst prove/excuse ever possible
A new npm supply-chain attack, referencing Shai-Hulud malware, has compromised multiple packages from organizations like Zapier, ENS Domains, PostHog, and Postman. Over 25,000 repositories are affected, with new ones added every 30 minutes.
Shai-Hulud 2.0: Ongoing Supply Chain Attack
wiz.io
Everyone’s joking about the Apple App Store source map leak, but “security through obscurity” isn’t security at all. Apple could open-source the entire front-end and only win from that — that code isn’t their secret sauce. Congrats to @svelte.dev team anyway. P.S. Do Apple still use svelte 4?
Imagine a web with no cookie banners, as well as no tracking, targeting, or AB experiments on users
DRY is often confused as "don't repeat code," which was never the intended meaning. DRY is about knowledge. Don't repeat knowledge. You can repeat identical lines of code that don't repeat or leak knowledge. 1/2
I love PWAs. But ironically, the only one I have installed is web.dev — which probably makes me a 99th percentile user. My favorite “trick”? Showing people who ask about PWAs how to install one :D
web.dev
Guidance to build modern web experiences that work on any browser.
web.dev
front-end world moved from “new framework every month”(which are mostly the same nowadays!) to “new rust-based tool every month”. Just started a new project with Biome/Vite/Rollup about month ago - now I’m already being nudged toward Oxc/Vite/Rolldown… while my older projects still on webpack/eslint
Threlte 8 is Here! 🤗 Six months in the making, Threlte 8 redefines performance, flexibility, and developer experience for 3D web graphics using Svelte. It’s our biggest leap yet, powered by Svelte 5, exciting updates from Three.js, and tons of community input. 1/9
How Well Can You Hear Audio Quality? www.npr.org/sections/the... My results were not so impressive, from the 2nd try I've got 4/6 correct answers(1/6 on 1st try) with Sennheiser HD599 connected to laptop. Honestly, 128kbps, 320kbps, and uncompressed audio sound nearly identical to me!
How Well Can You Hear Audio Quality?
A hi-def test for your ears (and your audio equipment): Listen to these songs and see if you can tell the difference between an MP3 and an uncompressed audio file.
npr.org
Gartner reports look charming, but in my opinion, they're often overvalued. The Hype Cycle & Magic Quadrant are good example of great storytelling, but they're rarely useful (and sometimes even harmful) for real decision-making
Tip: Chrome DevTools can override the content of Fetch/XHR requests! Useful for mocking APIs without waiting on backend changes.
Obsession with having an opinion on everything is everywhere: monoliths/microservices, FP/OOP, React/Vue/Svelte, Android/iOS, Mac/Linux/Windows, static/dynamic typing, left/right - classic examples of tribalism While there are only two answers on all of these: “it depends” or “potato-potato”
Had to tweak UI for our long-untouched #Shopify App. Packages conflicted, so I tried upgrading everything - ran into tons of errors due to Polaris deprecations. Froze libs for now…
The State of JS 2024 survey results are now live! 2024.stateofjs.com/en-US A couple highlights 🧵
State of JavaScript 2024
The 2024 edition of the annual survey about the latest trends in the JavaScript ecosystem.
2024.stateofjs.com
This #Shopify dashboard for #BFCM24 is an actual masterpiece: bfcm.shopify.com
Shopify Live Globe 2024
Watch the world shop live
bfcm.shopify.com
I’ve designed enough A/B tests to conclude—with 95% significance and 80% power—that A/B testing in business is pure gambling
I deleted Copilot after a year of using it, and I feel 76.54% more productive now. It’s like a prison break for my mind… Meanwhile, this post still got autocorrected by ChatGPT.
Sitting here for a while, and was never sure how to start. I think it make sense to post own thoughts here, so I hope I’ll be very subjective