Pinned Tweet
I have started working on a tiny lockfile-less package manager for JavaScript:
github.com/narijs/nari
It implements bare-bones `node_modules` installs with workspace support.
I am already using it for a couple of my open source packages `webpack-virtual-modules` and `mochapack`
It would be a great experiment if we appointed key maintainers with limited term powers to an open source project based on secure RNG (fair coin flipping) among the group of willing contributors. Contributors sense of ownership and user trust would increase in such a project.
Automattic Is Doing Open Source Dirty
youtube.com/watch?v=SLdwYl_R…
I disagree with the author. I don't think Wordpress drama has serious risks for open source. Because the grounds for the drama is Trademark misuse (seems null and void legally), not open source license misuse.
Lockfiles used in JavaScripts projects can be harmful from security and stability perspectives. You have machine generated data in your repository that is used for package manager decisions to download additional code. (1/4)
`lockTime` field is used instead in the `package.json` to fixate the time of the install, dependencies having the highest versions that existed before this time point are used. This approach picks the dependencies from the same time epoch - versions that existed together
(3/4)
Victor Vlasenko retweeted
After fifty-three release candidates, Yarn 4.0 is now officially stable! 🥳🎉
yarnpkg.com/blog/release/4.0
Victor Vlasenko retweeted
Reminding of the basics.
1. RF invaded sovereign country.
2. RF launches missiles at cities.
3. RF destroys energy facilities to freeze millions.
Other tyrants are watching. The only way to end war – make 🇷🇺 leave 🇺🇦. Otherwise, 21st century will be an era of bloody conflicts.
Victor Vlasenko retweeted
We're super excited to announce that @dependabot now supports @yarnpkg v2 and v3. There's no action required if you already use Dependabot, things will just work seamlessly. github.blog/changelog/2022-1…
Victor Vlasenko retweeted
These contributions of @elmd_ have improved code quality in the @pnpmjs repo by a lot!
xitter.cf/elmd_/status/156967004…
👀 @pnpmjs running up to *4x faster* than local, entirely in-browser via WebContainers 🤯
Thanks a lot @zkochan for the collaboration 🙏
And this is just the tip of the iceberg! I can't wait for Oct 11 for the full reveal at viteconf.org ⚡️
Victor Vlasenko retweeted
You might have missed the changelog of the latest @NxDevTools v14.5.7
Nx now supports Yarn Berry! 🧶🍓
Big thanks to @arcanis for the support 🙏
Victor Vlasenko retweeted
- Части и подразделения ВС РФ и РГ, совершившие военные преступления Буче, Гостомеле, Ирпене:
- 64 омсбр 35 А Восточного ВО,
- 5 отбр 36 Восточного ВО,
- 331 пдп 98 пдд,
- 137 пдп 106 пдд,
- 104 и 234 дшп 76 дшд,
- 14 и 45 обрспн,
- 63 опОН Росгвардии,
- 155 обрмп ТОФ.
I've just contributed to Support Ukraine. Consider supporting them too — every little helps! opencollective.com/support-u… through @opencollect
Victor Vlasenko retweeted
Why are most devs using #OpenSource libs only interested in having their issue get fixed, without also providing some sort of contribution? (not talking about monetary contr.)
A reproducible example? A failing test? A PR? A review?
Is the #JavaScript open source community broken?
If anyone in EU still thinks the invasion of Russia to Ukraine is not their business and “just politics"
Victor Vlasenko retweeted
My own house is reportedly destroyed by Russian Forces in Irpin. The R&D lab is gone. Our children have nowhere to return now. It's a pile of money, hard work and dedication.
My family is safe, but hundreds are dying every day.
Please support Ukraine: github.com/vshymanskyy/Stand…
