bretc

5 ms·

1.
I Love Monorepos–Except When They Are Annoying(bret.io)
3 points by bretc 2y ago|2 comments
2.
by bretc 5y ago
https://bret.io Started as Jekyll, but then converted to just markdown in GitHub. My CMS is just Github basically, you can basically read and navigate the files in Github with very little content loss: https://github.
3.
by bretc 5y ago
Install scripts can be disabled with a config file, or npm flag, but your paranoia is not unwarranted.
4.
by bretc 5y ago
Deno does not have install scripts, or a lot of other npm+node features. You can turn these off in npm though if you want a hardened install step.
5.
by bretc 5y ago
Check out http://socket.dev/npm/issue/installScripts Majority are benign, but when a package without one adds one, you probably want to see why :)
6.
by bretc 5y ago
npm and GitHub have always had an awkward overlap. One of the goals at Socket is to provide an aligned 'union' view into the data both services offer. Keen eye!
7.
by bretc 5y ago
There is a smattering a tools across the eco system that provide this kind of info (packagephobia, avanka etc) and it would be fantastic to surface these in a unified product UI. You will know we've met our goals when socket becomes yo
8.
by bretc 5y ago
We are assessing this possibility.
9.
by bretc 5y ago
Same reason most of the malware ecosystem focused on windows instead of macOS for many years. Scale of your potential target, and also volume of noise that is made when something bad happens. Also it supports nested dependencies and the too
10.
by bretc 5y ago
I'm actually working on that page right now hah. Right now the integration is fairly slim, it just does typo squat warnings when you install a package that has a similar name to a more common package. The warning comes in the form of a
11.
by bretc 5y ago
1. We are in beta right now! We have the data and analysis, and are working hard to make it easy to integrate project specific views into it. 2. https://socket.dev/roadmap See https://socket.dev/npm/iss
12.
Nvm will **not** be adding support for Ayo.js(github.com)
63 points by bretc 9y ago|13 comments
13.
Announcing Choo v6(medium.com)
9 points by bretc 9y ago|0 comments
14.
by bretc 13y ago
It sounds like it primarily affecting US servers. Avoid those and don't use the chat.freenode.net servers.
15.
by bretc 13y ago
I'm pretty sure that happens when a nick collision happens.
16.
IndieAuth now supports OpenID delegation(aaronparecki.com)
4 points by bretc 13y ago|0 comments