October 24, 2025 at 5:45:49 PM UTC

	Since	posts	replies	likes	reposts and quotes	views
Bluesky	May 2023	1,039	8,236	23,127	2,380
Mastodon	Nov 2022	2,399	29,156	55,396	16,820
GitHub	Jul 2010	179	5,777 3,520	33,866	3,317
npm	Jul 2014	139	1,546			75,991,720
YouTube	Dec 2015	30		1,203		32,713
Letterboxd	Mar 2026	55
Blog	Nov 2025	20
Hacker News	Jan 2011	59	575	802
All	Jul 2010	4,807	37,967	114,394	22,517	76,024,433

as a security precaution I am now running all Eleventy projects submitted through support channels via a Virtual Machine (Ubuntu on VirtualBox)

Also posted to Mastodon.

14 replies

Zach Leatherman Bluesky 3 min later

I regret to inform you that discretion is now optional
Jason Garber Mastodon 12 min later

@zachleat I don’t want to be presumptive in one direction or the other because look around, but: satire or…?
1. Zach Leatherman Mastodon 15 min later
  
  @jgarber I’m not even sure how this could be satirical 😅😅😅
  1. Jason Garber Mastodon 29 min later
    
    @zachleat Fair enough! 😂
    My condolences and also your approach is super smart. Gotta stay safe out there on the information superhighway.
    1. Zach Leatherman Mastodon 39 min later
      
      @jgarber PRECAUTIONS ARE BEING TAKEN
      1. Jason Garber Mastodon 39 min later
        
        @zachleat SHIELDS UP
Zach Leatherman Mastodon 1 hr later

to be clear, the risk of someone phishing my npm credentials is *much* lower than the risk of “can you take a look at this Eleventy project that isn’t working quite right (and also contains malware, intentionally or not)”
Zach Leatherman Bluesky 1 hr later

to be clear, the risk of someone phishing my npm credentials is *much* lower than the risk of “can you take a look at this Eleventy project that isn’t working quite right (and also contains malware, intentionally or not)”
Dylan Staley Mastodon 1 hr later

@zachleat I found that GitHub Codespaces were a great way to run public reproduction repos for this exact reason. Just open the repo and click the button.
1. Zach Leatherman Mastodon 1 hr later
  
  @dstaley to be clear running any code on my computer is a huge mistake (malicious or not)
  (this is a good tip!)
  1. 𝙳𝚢𝚕𝚊𝚗 Mastodon 1 hr later
    
    @zachleat @dstaley I make it a point to not run any code on my computer. Coincidentally, I am unemployed.
    1. Zach Leatherman Mastodon 1 hr later
      
      @closingtags @dstaley PIVOT
      1. 𝙳𝚢𝚕𝚊𝚗 Mastodon 1 hr later
        
        @zachleat @dstaley
    2. 𝙳𝚢𝚕𝚊𝚗 Mastodon 1 hr later
      
      @zachleat @dstaley FREELANCE! I MEANT TO SAY FREELANCE!