Reporting the same security issue to pnpm vs bun:
pnpm acknowledged it quickly, shipped a fix, backported it, and published an advisory.
bun never acknowledged, silently fixed this and another issue I reported, has not published advisories.
One takes security more seriously.
Does any company want to sponsor the work to upgrade svelte-persisted-store to Svelte 5?
It gets ~350K downloads per month
npmx.dev/package/svel...
nate moore
David Sherret
New in Astrobook: resizable sidebar, collapse toggle, and instant search.
A lightweight Storybook alternative for React, Vue, Svelte, Solid, Preact, Lit & Astro.
Happy to join @astro.build as a maintainer!
Video
Today I'm launching astro.jobs! It's an unofficial job board for the @astro.build ecosystem.
If you're looking for a job or if you have open positions related to Astro, check it out!
🚀 tsdown v0.22 is out, now powered by Rolldown 1.0.0!
What’s new:
✦ Upgraded to Rolldown v1.0.0
✦ Reduced install size by 1.33 MB
✦ Auto-detects the `bin` field
✦ Dropped support for Node.js 20, 21, and 23
✦ `dts` is now inferred from `compilerOptions.declaration`
github.com/rolldown/tsd...
Josh Nussbaum
Find your next role in the Astro ecosystem: from startups to enterprise teams hiring developers who are truly stellar.
🚨 Breaking Changes
Drop Node.js < 22.18.0 support, make unrun optional, add tsx config loader - by @sxzz (a1042)
dts: Auto-enable dts when tsconfig declaration is true - by @sxzz in #872 (0...
This di.day is my hardest yet. Bye discord, github and npmjs registry.
(there may be some cleanup activities in the coming days but no more active contributions, accounts are inactivated to prevent imposter takeover)
Unfortunately this means i also am no longer an active vite team member.
🚀Rolldown 1.0 is here!🚀
Rust-based high-performance JavaScript bundler.
🏎️ Runs at native speed that’s up 30x faster than Rollup
🤝 Compatible with existing Rollup & Vite plugins
⚡The underlying bunder for Vite
After 2 years, Rolldown is officially stable and has 20+M weekly downloads.
