Arnout, 3rdEden @3rdEden

Father of 2, Author of countless OS projects/libraries (Node.js, React(-Native), WebSockets, Frameworks etc) I shoot stuff online. 3rd-Eden.com The Netherlands Joined April 2008

Tweets

19K
Followers

2K
Following

1K
Likes

2K

Arnout, 3rdEden @3rdEden

a year ago

Its time that @npmjs , @github step up, take responsibility, and start protecting authors. Let me opt-out of exposing my email against my will.

0 0 0 79 0

View Details

Not only that, there is only 1 email address that is exposed, that is the same email npm uses for their communication, hence an easy phishing. As I use a dedicated alias for npm, i can also see that this public exposure is the reason I get so much spam. At least 40% is my alias

1 0 0 101 0

View Details

Arnout, 3rdEden @3rdEden

a year ago

Just want to make it perfectly clear, @npmjs is 100% to blame for all the phishing attacks we package authors have to endure. Exposing the email address of authors for shits’n’giggles is 100% to blame for this. There is no option to prevent your email from being leaked by npm

2 0 1 156 0

View Details

Arnout, 3rdEden @3rdEden

3 years ago

Does any have a spare blsky invite? Seems like its time to move while twitter is on its way to implode. 🫣

0 0 1 277 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

@tlrobinson Its a great way to tell someone is a good or bad engineer.

0 0 0 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

TFW you find out the web finally has a deep clone API called `structuredClone`: 🥳 TFW you realise it doesn't work on Proxies: 😩

0 0 1 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

I really hate that this keeps happening.

0 0 1 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

TFW, you accidentally create another framework.

1 0 0 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

It's very liberating to work on your own projects, as you're not hindered by the constraints and boundaries of your work environment. You create. You experiment. You innovate. You're the mad scientist.

0 0 2 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

My dog has been responsible for 100% of the fires caused by our 2 @iRobot Roomba's. Long hair dogs, rotating parts == friction. It's a recipe for disaster.

1 0 0 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

Security researcher reporting bug: $100-1000 OpenSource maintainer fixing bugs: $0 🥲

0 0 0 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

The current state of the art mono repo tooling, nx/lerna, decided that fork bombing is an acceptable pattern when executing tasks. Is this _really_ the best we can do? Like, really?

1 0 0 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

Hot take: React did more harm than good for the web. Our apps got heavier, and we somehow accepted that is fine to ship duplicate content because yay hydration. It's extremely overkill for the majority of apps that just render basic UI elements.

0 0 2 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

@bahmutov While not without flaws either, I do agree, it solves a lot of the problems.

0 0 0 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

I'm thankful for JSDOM. For reminding about the mistake I made for installing it, and using it in a project. What were we thinking, trying to polyfil a JS environment with non functioning polyfill API's that do not represent the real world usage of our code at all.

1 0 2 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

It doesn't throw an Error, no, that would make too much sense right? Instead we create an Error instance, and log it to the console instead, sending you on a while goose chase figuring out where the error is coming from, why your tests are still passing.

0 0 0 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

Not only does it means you're not testing your code correctly and you basically cross your fingers and hope that there's no implementation difference between the real API and whatever polyfill they designed. But when you hit those API differences...

1 0 0 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

@MylesBorins @Raynos I understand the importance of 2FA on high profile packages to severely reduce the attack surface, but when the 2FA is forced upon you in these cases is should be on package basis, not account wide. This would severely reduce the friction on developers.

1 0 0 0 0

View Details

Arnout, 3rdEden @3rdEden

4 years ago

@Raynos @MylesBorins I feel exactly the same. It feels like a punishment every time im forced into 2fa. Didn’t ask for, don’t want it, no way to opt out. I get it, some packages are high risk, but there’s better ways to solve it than taking npm accounts hostage.