Thank you to Vercel for the sponsorship! Excited that Turbopack is using Lightning CSS. Congrats on the release to the team! 🥳 nextjs.org/blog/turbopack…

excited to see what Nate Moore is on 🦋 has in store with this

6️⃣ days until the first ever look at vlt /vōlt/! Join luke and 🦋 @ruyadorno.com at NodeConf EU for a workshop on how vlt can transform your Monorepo. 🎟️ Tickets still available! ti.to/nearform/nodec…

going to surprise the rest of the vlt /vōlt/ team at NodeConf EU with these new tshirts i made, wdyt?

What questions do you have about managing dependencies in a monorepo? I'm scripting for the second video of From Zero to Turbo. Plan on covering: - Where to install (Root? In package?) - How to sync versions - Debugging errors - Package manager opinion(s) - ??? What else?

🦋

⚡️

Support for the equiv of “npm ls” varies among pkg managers. yarn/berry and bun don’t support a —prod equiv to exclude devDeps. npm, pnpm, and yarn/classic do though. A —parseable is a plus too.

would be cool if a package managers ls command took any arbitrary query 👀 there are many times i have wanted to filter even within prod deps

gzipped tarball size is generally very low on my list of concerns when publishing, but i do find this important. i took a look at publishing multi arch executables to the npm registry without doing the swap optional dep on postinstall dance and ended up with 0.5GB 😱

i broke many scoped packages on registry.npmjs.org after i asked copilot to help me rewrite a templated string regex that was using lookbehind assertions

The most eagerly anticipated talk at NodeConf EU has begun 🎉 Joyee Cheung is here to talk about how require(ESM) was enabled in Node 23. (At least three previous speakers all gave trailers for this talk).

Join us in London on Wednesday 13th November for HalfStack 2024! ⚡️ Learn from amazing speakers, network with fellow devs, and have fun! 🎟️Get your tickets: halfstackconf.com/london #HalfStack #London #JavaScript

You're invited to another open working meeting this Friday, 10am PT, to discuss: ⭐️ review draft of governance document and provide feedback ⭐️ discuss pain points with JSR and brainstorm solutions RSVP: deno.co/jsr-meeting

We're excited to announce the new Insights Selectors to the vlt /vōlt/'s Dependency Selector Syntax. This new information allows you to query packages based on a variety of security-focused metadata powered by Socket!

🚀 Stoked to share this with y'all. Socket has best-in-class security insights & querying dependency graphs with vlt /vōlt/ keeps getting more & more powerful as we add more integrations. You can play around with this new data in the GUI OR use these new capabilities for

🚀 The vlt /vōlt/ team just launched real-time dependency analysis powered by Socket! Developers can now explore supply chain risks directly in their graph, with rich security metadata from Socket built in. More on the integration → socket.dev/blog/vlt-launc… #JavaScript

🚀Dependency Selector Syntax can now be used across vlt /vōlt/ commands like run, exec, and pkg! This enables precise filtering when running scripts, executing commands, or getting package info. You have access to the whole graph! Read more about it: blog.vlt.sh/blog/run-exec-…

🚀 New query-powered vlt /vōlt/ commands just dropped! See how to release subsets of your packages with the new version, pack, and publish commands, all backed by the powerful dependency selector syntax. blog.vlt.sh/blog/pack-publ…