Yarn

Why I'm Working on Yarn

(This post is about Yarn, a new JS package manager that was announced today [https://code.facebook.com/posts/1840075619545360].) I work with Node and npm packages almost every day, on Tilde's main app, Skylight, or on one of Ember's many packages. Many have remarked upon how fast

Yarn: A new package manager for JavaScript

Visit the post for more.

Just Fucking Use Go - Blain Smith

Hey, dipshit. You know what compiles in two seconds, deploys as a single binary, and doesn't shit itself when a transitive dependency gets yanked from npm at 3am? Go. The same way HTML has been sitting there since the dawn of the goddamn internet waiting for you to stop overcomplicating the frontend, Go has been sitting there for over a decade waiting for you to stop overcomplicating the backend.

A GitHub for maintainers

Giving dependencies the same treatment the fork got

Rust - The WebAssembly Component Model

Rust has first-class support for WebAssembly core and WebAssembly components via the available targets in the toolchain:

Homebrew

The Package Manager for Everywhere.

extism/extism

The framework for building with WebAssembly (wasm). Easily & securely load wasm modules, move data, call functions, and build extensible apps.

extism/extism

The framework for building with WebAssembly (wasm). Easily & securely load wasm modules, move data, call functions, and build extensible apps.

anthropic-experimental/sandbox-runtime

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

A Tale of Three WebAssembly Runtimes

Walking through the implementation of three different WebAssembly runtimes from scratch

Popular npm Packages in the keyv and Cacheable Namespaces Co...

Popular npm packages keyv and cacheable compromised.

rust-lang/rust

Empowering everyone to build reliable and efficient software.

keyv and cacheable npm Package Hijacked in Supply Chain Attack | Wiz Blog

Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages.

Package Managers Need to Cool Down

A survey of dependency cooldown support across package managers and update tools.

npm, yarn による zero install 戦略 - from scratch

jsconf.eu 2019 に行ってきました。 特に npm や yarn の今後の話とそもそも Registry をどうしていくか、の話があったのでお知らせします。 そもそも Registry をどうしていくかについては次のエントリで話します。 tink: A Next Generation Package Man…