@evertp

This account is no longer active. Find me here: Mastadon: @evert@indieweb.social / https://xitter.cf/t.co/RO721W1INy

 多伦多
evertpot.com/
Joined September 2007
  • Tweets10.7K
  • Following672
  • Followers1.5K
234Media
If I stopped following you on Twitter it might mean I've already found you on Mastadon and I'm slowly shutting down here!
1
2
1,117
Fun NPM fact. @bitdotcloud has published 450K packages in "@teambit" scope.
1
29
It's mostly useless prereleases. But NPM is immutable and so they will continue to take up space.
16
Fun fact about the NPM replication feed. If you just follow the feed to get updates for ever package, you will miss packages because they retroactively insert changes in the *past* of the feed.
1
1
144
more replies
People have been reporting this since 2025 but no official response: github.com/orgs/community/di…

`npm replication API` changes and migration guide · community · Discussion #152515

Overview As part of our ongoing improvements, we are making changes to our replication API services. This is to ensure availability and performance of our feeds. Moving forward, only a limited set ...

github.com
1
36
So to accurately replicate NPM, it's not enough to follow the 'sequential' feed, you also have to go back later to see if you missed anything. 🫠
26
Years ago I found out that there was an open source version of Sim City called 'Micropolis'. Ever since then I wanted to make a MMO version on the web. I spent a ton of hours on this but the project was too big in the end and I gave up on it.
2
1
5
168
more replies
If it sounds like fun, go take a look here: globalcity.evertpot.com
1
70
Woah 190 people took a look today apparently and 62 areas were claimed. 🎉
1
32
Evert Pot retweeted
Kevin
@linguinelabsSep 29
If Canada made america.gov it would be called cgc-cms-srv136.services.cra-…
146
467
47
10,458
430,318
I made a Markdown-like format for forms/surveys. Been sitting on this idea for a few years. Feedback welcome! askdown.dev/
1
4
12
347
It's both a hosted Google Forms replacement and a format with open source reference.
1
69
Evert Pot retweeted
cody
@codybrouwersSep 22
Some more data for CI cold installs after switching to vlt's registry from npm. 35% faster at p90!
cody
@codybrouwersSep 10
Switched to @vltpkg registry from npm and saw some nice improvements in cold installs and package metadata size
4
5
3
9
3,142
At work I've been working on a safer, faster NPM mirror and place for teams to publish private packages. After roughly 8 months we're done! It's been a ride. vlt.io #vlt #npm

Home | vlt /vōlt/

Package registries for teams that move fast

vlt.io
Darcy Clarke
@darcyAug 4
Excited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA! A drop-in npm replacement, built so nothing runs on your machine just because you typed install. → faster delivery → malware blocking at the registry layer → graph-native querying
1
1
7
366
Evert Pot retweeted
Darcy Clarke
@darcyAug 4
Excited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA! A drop-in npm replacement, built so nothing runs on your machine just because you typed install. → faster delivery → malware blocking at the registry layer → graph-native querying – at Toronto, Ontario
21
35
16
142
40,771
Wow accidentally posted here instead of mastodon/bsky because I had a tab open and wasn't looking at the URL.
1
56
Woah, someone wrote an article about my homelab project xda-developers.com/i-built-a…

I built a Windows 3.1 dashboard for my homelab, and it's the most fun I've had self-hosting

Homelab for Workgroups turns your dashboard into a nostalgic operating system, and that's exactly why I use it

xda-developers.com
3
94
Evert Pot retweeted
Darcy Clarke
@darcyApr 1
tldr; if you used @vltpkg as your package manager, then you were protected the minute @SocketSecurity flagged the malicious packages in the `axios` attack yesterday. The best time to switch your package manager was 48hrs ago, the next best time is right now. More below: blog.vlt.sh/blog/vlt-build – at Toronto, Ontario

Introducing Phased Package Installations | vlt /vōlt/

When you run vlt install, packages are downloaded and extracted to node_modules, but no lifecycle scripts execute.

vlt.io
Socket
@SocketSecurityApr 1
🧨 Axios only needed to be resolved somewhere in your dependency graph to affect you. Semver + transitive deps + runtime installs = hidden blast radius. If you only checked your project’s lockfile, you may still not know. socket.dev/blog/hidden-blast… #nodejs

The Hidden Blast Radius of the Axios Compromise

The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

socket.dev
3
14
44
12,260
I built a browser-based Gopher client / proxy in Node.js. Go check it out! burrow.din.gy/
1
94
Load more