Loading…
Loading…
Writing · 6 posts
Thoughts on web development, React, Next.js, CSS, and building things for the web.
TanStack packages were compromised in a mass npm supply chain attack. Here's a deep-dive into what happened, how the attack worked, and the concrete steps every JavaScript developer must take to protect their projects right now.
No package manager supports minimum release age natively — but you can enforce it. Here's a complete guide for npm, pnpm, Yarn, Bun, and Deno, plus a universal CI script that works everywhere.
A landmark npm RFC proposes making install scripts opt-in by default. This deep-dive covers how the current system works, why it's dangerous, what the RFC proposes, the tradeoffs involved, and how you can protect yourself right now.
ES6 promised tail call optimization — but V8 and Firefox never delivered. Here's what actually happens in Node.js when you write tail-recursive code, and the patterns (trampolining, iteration, generators) that actually work everywhere.
BlueJS is a groundbreaking new compiler that turns JavaScript into tiny native binaries without bundling V8. We explore how it works, what it's good for, and where it fits in the future of JavaScript deployment.
Every developer rewrites their portfolio eventually. Here's the stack I chose, what surprised me about Next.js 15's App Router, and a few things I'd do differently.