Node.js packages don't deserve trust
Another week, another npm supply chain attack . Yikes! People on hacker news are wringing their hands about what should be done. The problem seems dire.
The latest blog posts to take off on Hacker News. 1,551 posts.
Another week, another npm supply chain attack . Yikes! People on hacker news are wringing their hands about what should be done. The problem seems dire.
It was a calm day on the puppy-linux thinkpad. The CPU was cool, the RAM was operating at double data rate, and a gentle breeze flowed through the chassis as the fan whirred away. A girl wanted to log onto Discord to chat with her friends, but much to her dismay, Discord needed a package update! No matter, such things…
A lot about sockets, syscalls and bits
I’ve seen a lot of misconceptions around what the unsafe keyword means for the utility and validity of Rust and its marketing as a “safe systems language”. The truth is a lot more complicated than a single pithy tweet can possibly sum up, unfortunately; here it is as I see it.
Haphazard investigations
Turborepo 1.2 introduces improved task filtering, artifact signing and integrity, human-readable and JSON dry runs, and more!
Native lets us build an app that feels right at home on macOS, rather than reflecting the average of every platform and feeling right on none of them. There are a lot of cross-platform approaches out there that attempt to feel native, but they don't.
by Laurence Chen There is a famous quote: Programming is thinking, not typing. After doing this job long enough, sometimes, I feel I am doing too much typing. No matter whether...
You read documentation and tutorials to become a better programmer, but if you really want to be cutting-edge, academic research is where it's at.
We are pleased to announce the release of Ruby 3.2.0-preview1. Ruby 3.2 adds many features and performance improvements.
TL;DR: This is a proposal to create a language that sits somewhere between Typescript and Rust, and which you can incrementally adopt if you already use Typescript.
How you can use micro-commits to effectively apply the Strangler Fig pattern.
This article was prompted by responses to a tweet I wrote in response to an analysis of the research area of papers submitted to the 2022 ICSE conference, the flagship conference for software engineering research. These led me to reflect on software engineering research in general. I’m sorry to say that I think that…
I am on a number of different compiler mailing lists. One of those is the mailing list for the Tiny C Compiler . Imagine my surprise when a recent email mentioned our latest series and suggested trying a similar approach to improve the code generator in TCC. I was interested to see if there were any low-hanging fruit…
Explanation and making of a website in a single JavaScript file
An Exploration of Drawing as Programming Language, Featuring Ideas from Lambda Calculus
In my previous article I looked at the ways that Rust could be better at pointers. Half of the problems were fundamental issues that affect basically every programming language that lets you mess with pointers directly, and the other half were rust-specific issues. My article also proposed two solutions: for the…
Learn what's new in Emacs 28.1
Build your software factory on Warp: factories as code, any model or harness, with evals, benchmarks, and self-improvement built in.
From automating builds and releases to taking care of large-scale regression testing, here are a few ways we use GitHub Actions to build GitHub.
It’s hard for me to believe these words but I pushed Sidekiq’s first commit on Jan 16th, 2012. Ten years ago. The public announcement. One month later. One quarter later. Some context for those new to this blog: Sidekiq is the most popular background job system for the Ruby programming language. Every application has…
Pharo is a pure object-oriented programming language and a powerful environment, focused on simplicity and immediate feedback.