Bookmarks

Node APIs can now be deployed on Vercel with zero-configuration, with fluid compute and automatic scaling

On June 24, 2026, an attacker compromised the codfish/semantic-release-action GitHub repository. At 15:39:06 UTC they force-pushed a malicious commit and repointed several version tags to that commit. As a result, any workflow running against those tags after that time executed the attacker's code inside its GitHub Actions runner.

Val Town is a sort of Third Space for non-prod code

2026年6月23日に、GMO Flatt Security主催の「OSS開発者は今何をするべきか？ソフトウェアサプライチェーン侵害対策を考える」で「Hardening npm Publishing」というタイトルで、npmパッケージの公開フローをどう守るかについて話しました。

Build self-contained desktop applications from a Deno project, with framework auto-detection, hot reload, native windowing, auto-update, and cross-platform distribution.

Fast drop in replacement for `cn`. Contribute to aidenybai/cnfast development by creating an account on GitHub.

Why JavaScript lacks true full-stack modules, what Rails and Laravel get right, and how Wasp can bring that pattern to JS.

Introduction

Go package to make lightweight ASCII line graph ╭┈╯ in command line apps with no other dependencies. - guptarohit/asciigraph

Go error library with error portability over the network - cockroachdb/errors

A golang formatter that condenses code. Contribute to abemedia/gocondense development by creating an account on GitHub.

Quick lets anyone at Shopify ship a site in seconds. It has changed the culture of how we build and share.

I’m a frontend developer, consultant, accessibility auditor, blogger, teacher, and book author from Austria.

A single root package.json can look simpler in an Nx monorepo but dependency hoisting hides ownership and can turn upgrades into confusing production build failures.

はじめに:なぜ今、GitHub Actionsのセキュリティなのか GitHub Actionsが侵害されると何が起きるか GitHub Actionsに対する攻撃の事例分析 脆弱なトリガー構成を悪用したインジェクション Ultralytics(2024年12月) nx(2025年8月) タグ汚染によるサプライチェーン…

Words from me as developer, student and human.

TanStack Table V9 can use dramatically less memory than Table V8 in large tables because row, column, cell, and header APIs now live on shared prototypes instead of every object instance.

Subito is Italy's leading classifieds marketplace, serving millions of users every month. Our ad...

How we are moving toward stricter styling contracts, less runtime work, and a more predictable foundation for Linear’s UI.

Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust. - sentrux/sentrux

今日のアプリケーション開発において、Feature Flags（機能フラグ）は欠かせないツールとなっています。Vercel Flags を使用することで、Vercel 上でホストされているアプリケーションに Feature Flags を簡単に導入することができます。この記事では、Vercel Flags を使用して Vercel 上でホストされているアプリケーションに Feature Flags を導入する方法を試してみます。

Loops, harnesses, and why even loop skeptics may end up with them.

- PRD's - Research files - Decision maps - Implementation plans Folks who agree with me, what are you using instead?

An AI IDE, collaboration platform, and building blocks for your software factory. Ship 2-3x faster across the entire SDLC while maintaining rigorous standards for code quality and architecture.

It all comes down to practical trade-offs. Making it a rust-based plugin is already significantly faster than the Babel version (up to 15x), but still 50% slower than direct-in-oxc due to the data passing / AST

LiteLLM is moving its AI gateway to Rust: 15x throughput, 11x less memory, and sub-1ms per-request overhead. No v2, no migration, your config stays the same.

A browser that gets complex work done across your websites, accounts, and history.

The GitHub Copilot app is the only desktop experience for agent-driven development built natively on GitHub for macOS, Windows, and Linux.

An easy-to-use secure configuration generator for web, database, and mail software. Simply select the software you are using and receive a configuration file that is both safe and compatible.