🧾 Introducing npm.tax Estimate the probability of being impacted by a breach in your npm supply chain. Adjust the knobs to see how slimming your node_modules lowers your risk. Look up a package to see its own risk profile, then share the report, e.g. npm.tax?direct=59&tr.... What's your npm tax?
Профиль
Santosh Yadav | GDE 🅰️ | GitHub ⭐ | MVP
Профиль VivelyPrincipal Developer Advocate - Open Source, Google Dev Expert , Github star, MVP Co-Founder Thisis_Learning https://www.youtube.com/@TechTalksWithSantosh https://dev.to/santoshyadavdev views my own
VS Code CodeRabbit extension v0.21.2 is live 🚨 > In-IDE reviews now stay connected and reconnect more reliably during longer sessions. > Sign-in flow improved to help you reach the right workspace. Install or update to take advantage of the latest version ✌️
+ PII leaking into logs. + An auth server error. + A concurrency bug in an idempotency path. CodeRabbit surfaced all three in the systems that protect 1.6M+ customers, before a human even opened the PR. Find out how we managed that (and more use cases) below 👇
@vitest.dev uses knip now to find unused code. Thanks, @webpro.nl for a great tool!
Summer break is over: The @e18e.dev & friends show is coming back next week 🎉 And we got nobody else than the one and only @honk.foo talking about Porforr and how a future for natively compiled JavaScript could look like! Swing by at 7pm CEST / 1pm EDT on August 4th 👌 youtube.com/live/L8Edgas...
Ready for another speaker? Welcome @danieljcafonso.bsky.social! Senior Developer Advocate at @pagerduty.bsky.social, @solidjs.com DX team member, @egghead.io instructor, React Query author and @jnationconf.bsky.social organiser. One of the kindest and most approachable people you’ll meet in tech.
the best news! 🎉 this is the kind of community collaboration i'd love to see more orgs doing. CodeRabbit can now flag redundant packages amongst other things 🧹
Santosh Yadav | GDE 🅰️ | GitHub ⭐ | MVPCodeRabbit's ESLint reviews now run the e18e ESLint plugin v0.5.1by default. It was great to collaborate with @43081j.com to make this possible 😍
this year i've carved a big chunk of my time out to officially work on OSS. if you like what I do, or use the things I work on, sponsorships go a long way. these help me keep the balance I have, and allow me to dedicate a lot more time to open source. thank you to those who already sponsor me 💙
Side quest of the day: 🧹mermaid-compact Mermaid is great for diagrams… until noticed this cute thing, pulls in 100+ dependencies (140 MB install), and Vite emits 100+ chunks from the mermaid.esm.min import 😅 No more! The whole thing now bundles into a single ~2.7 MB chunk.
Mocha is donating $20k to more active open source projects: Knip, @nodejs.org, Prettier, and Unified. 🤎 mochajs.org/blog/2026-co...
2026 Community SponsorshipsToday, we are happy to announce that Mocha will be donating $5,000 each to four different community projects, for a total of $20,000 donated to the modern JavaScript community.mochajs.orgHuge news to Storybook developers using MSW: version 3.0 of our add-on has just been released! 🎉 github.com/mswjs/msw-s... This brings a new architecture to support both CSF3 and CSF4, fix some long-standing issues, become dependency-free, and a ton more.
🎉 The preview of our community-powered device database is live! Think "Wikipedia of smart home devices." Powered by real-world usage from thousands of Home Assistant users who opted in back in February, this is just the first step. More to come as we keep building in the open.
CodeRabbit can now investigate and fix CI failures on GitHub! Once you trigger the action using '@coderabbitai fix-ci', CodeRabbit will investigate, fix, and deliver a stacked PR ✌️ Check out the docs below to get started.
This is such a cool role on one of the greatest teams I've ever worked with. Feel free to message me if you have questions about Bloomberg or their infrastructure org. bloomberg.avature.net/careers/JobD...