javascript doesn’t belong in my pngs
In reply to Mastodon post
A versioned archive of posts from Bluesky, Mastodon, GitHub, npm, YouTube, Letterboxd, Hacker News, and blogs. Browse the most popular posts.
Last built .
| Since | posts | replies | likes | reposts and quotes | views | |
|---|---|---|---|---|---|---|
| Bluesky | 1,039 | 8,236 | 23,127 | 2,380 | ||
| Mastodon | 2,399 | 29,156 | 55,396 | 16,820 | ||
| GitHub | 179 | 5,777 3,520 | 33,866 | 3,317 | ||
| npm | 139 | 1,546 | 75,991,720 | |||
| YouTube | 30 | 1,203 | 32,713 | |||
| Letterboxd | 55 | |||||
| Blog | 20 | |||||
| Hacker News | 59 | 575 | 802 | |||
| All | 4,807 | 37,967 | 114,394 | 22,517 | 76,024,433 |
javascript doesn’t belong in my pngs
Ugh — looks like Vercel put a “System Mitigations” client-side security intercept/redirect check on the @eleventy Indieweb Avatar Image service, which caused images served by the service to break (since it is serving image content, not HTML). 😢
the purpose of a system (person) is what it does (they do)
Thinking about Matt’s claim that Automattic’s recent tantrums were *not* motivated by financial difficulties as they laid off 16% of their workforce yesterday.
https://techcrunch.com/2025/04/02/wordpress-maker-automattic-lays-off-16-of-staff/
https://x.com/sereedmedia/status/1839394786622722432
I’m sure it’s still unrelated.
Something exciting is happening live now on https://fontawesome.com/!
we did it, everyone.
“can we have a feature where a toot self destructs when it hits 50 boosts” will self destruct in 10… 9…
@Fyrd a ha — sorry to bug you! this suggests they are bundled together: https://github.com/web-platform-tests/interop/issues/768
@Fyrd If I were looking for the browser support for implied `hidden="until-found"` behavior for `<details>` — is that somewhere? Or is it just a part of until-found stock?
I didn’t use en-dash here and I’m ashamed of it
How old is the oldest (non-personal) software project that you’re still actively maintaining?
at 42 boosts I’m lucky I didn’t have to make any hard decisions
tech companies haven’t earned an april fools’ day this year, sorry everyone
dear tim apple: a “time to stand!” notification from your watch when a very anonymous individual (not me) was sitting on the toilet is wild
Today on Trans Day of Visiblity I’m thankful to folks living their lives in an unapologetically authentic way — truly showing us what freedom can look like when we discard the baggage society has imposed on all of us. Love y’all.
I’m proud of this project 🥰 I worked hard on it and it turned out great!
I’m thankful we didn’t add a bunch of third party JavaScript or overbearing analytics or advertisements — feels good to work with good folks.
Check the speedometer on the brand new Blog Awesome (now with @eleventy)
am I legally allowed to build this set or do I have to take it to an authorized dealer and pay them to do it? #RightToRepair https://www.lego.com/en-us/product/john-deere-9620r-4wd-tractor-42136
which web sites did the FBI warn us about? wrong answers only

tfw the war boys ask you to witness them (on signal)
boosting this is an attack!!
can we have a feature where a toot self destructs when it hits 50 boosts
> Avoid an excessive DOM size
No
you’re telling me this antivirus software I bought doesn’t stop posts from going viral
bribecoding is a new phenomenon where you pay open source developers a living wage to work on projects that your business uses
the gasps I gasped when this video segued to sponsored content at the end 😅
@hexagoncircle absolutely no obligation but I wonder if you can escalate this somewhere https://urbanists.social/@cassey/114218933743717085
The @SocketSecurity folks have quickly fixed this one:
it’s hard not to be jaded when facial recognition is being used in criminal investigations while our industry is having trouble accurately testing whether two strings are equal

Update: thanks to @chrisw_b for hunting this down: looks like a huge flaw in the vulnerability scanner being used by these tools (it ignores namespaces on package names!)
More info:
https://github.com/jridgewell/gen-mapping/issues/12
https://github.com/anchore/grype/issues/1701
Why does socket.dev report that the latest version of next.js has a malware dependency? https://socket.dev/npm/package/next/alerts/15.2.3?tab=dependencies
“Malicious code in gen-mapping (npm) Any computer that has this package installed or running should be considered fully compromised.”
Update: looks like this is a pretty big flaw in the vulnerability scanner — not in next (check the replies for more info)

look, you can say you hate me to my face or you can send me a URL with a utm_source param on it — same thing
The video for the above talk has been posted (already!) https://www.youtube.com/watch?v=O89QIruTink
(and on my web site: https://www.zachleat.com/web/blog-awesome/)
my working theory is that indie developers make faster software because they feel the pain of buying their own hardware and are more prone to making it work on older hardware (just like folks using the software)
@eleventy starting now!
ha ha ha licenses aren’t good vibes — we’re coding only with vibes now
what happens when an LLM is trained on GPL licensed code
I’m speaking at the @eleventy Meetup today:
Moving Blog Awesome from WordPress to Eleventy
https://11tymeetup.dev/events/ep-22-umami-analytics-and-blog-awesome/
this winter storm is making the power go out every ten minutes — my external monitor is on battery backup and my internet connection automatically swaps to my phone hotspot — unfortunately even in the middle of nowhere I can seamlessly continue working weeeeeee
Markdown is much better when you use the HTML escape hatch early. When you nest an image in a link `[](url)` the syntax quickly approaches the readability of regex (pejorative)
Another great point in discussion with @_web_:
These designs are from 1987 🤯 when the state of the art in operating systems looked like this:

Love love love that the speed tests on https://calibreapp.com/ include a scrubbable timestamp-overlaid video that lets you see (frame by frame) how your web site loaded! This is an *excellent* feature.
@wiredprairie shared this lovely video with me about some of the folks that worked on LCARS and it has me wanting to apologize for how little substance the above critique had — Sorry! Not to say that LCARS isn’t without flaws but I wish I had been more productive in my armchair review.
Here’s the video: https://www.youtube.com/watch?v=D24tYFIVyv0
CEO selling AI claims “90% of code will be written by AI in 3–6 months; 100% in 12 months.“
https://www.businessinsider.com/anthropic-ceo-ai-90-percent-code-3-to-6-months-2025-3
set your calendar reminders, folks — and remember that hype is a monetizable asset (in silicon valley)
let me just say up front that I love Star Trek—but we have to agree that LCARS is not good UI. societal utopia, sure—where are the user interface folks
the timeline is always connected if you’re paying attention https://mamot.fr/@nhoizey/114171893736072813 cc @nhoizey
for my non-USA friends: do you understand the concept of “buffet pants”
everything’s computer (pejorative)
@import() maps for CSS
SAASquatch
…is that something? fine, no you’re right
are we ready to reconcile how many tech spaces have at least one anger-as-a-personality-substitute man that everyone just tolerates (if not idolizes)
classic wordpress.

PageSpeed Insights offers some WordPress specific advice on this web site with a 9.5s TTFB:
> Choose a lightweight theme (ideally a block theme) and implement full-page caching or a static site solution. Disable unnecessary plugins to minimize server overhead. Consider upgrading your hosting to managed or dedicated service.

how dare you clean up the spelling and/or grammar on that toot immediately after I boosted it — I loved it as it was
Let’s talk about why Baseline browser compatibility doesn’t tell a complete story about whether or not a feature can be used “safely” by developers.
Consider `accent-color` (Not Baseline) versus CSS Nesting (Baseline 2023).
Browser compatibility is only a small piece: it’s far more important to consider the role the feature plays and how progressive-enhancement friendly that feature is.
CSS Nesting requires cross-browser ubiquity before use: `accent-color` is much safer, comparatively!
dismissing valid feedback as “change aversion” is a big ol’ red flag 🚩🚩🚩
this poll toot will probably self destruct at some point
*runs away*
the rise of developer celebrity has made software:
What I really want are issues to not be Open nor Closed but a third quantum physics style super-positioned state: Limbo
At first I was excited that this might be a nice replacement for the closed issue needs-votes “Enhancement queue” we use in Eleventy (https://github.com/11ty/eleventy/issues?q=label%3Aneeds-votes+sort%3Areactions-%2B1-desc+label%3Aenhancement) but alas, it doesn’t seem like it
Seeing Issue Types appear on the GitHub UI https://github.blog/changelog/2025-01-13-evolving-github-issues-public-preview/#organize-your-work-with-issue-types
and I’m left wondering: how is this better than labels? What unique benefit does it offer?
HTML is good, actually: https://www.zachleat.com/twitter/1169998370041208832/
Look, if we’re going to lean into sites versus apps 🥱 and MPA 🥹 and SPA 😬 have already encrusted their way into the discourse — what about MPS and SPS 😅 (this is a joke don’t use these)
anyway an SPS can go a long way before it needs to be an MPS (and you need a build step to help with duplicated boilerplate)
Manual ‘till it hurts from @adactio https://adactio.com/journal/21397
After some @eleventy housekeeping yesterday I’ve crossed paths with folks on the @e18e team and just wanted to say they are doing very good work!
If you’ve ever been frustrated by outdated deps or had trouble upgrading deps, these folks are preemptively solving those kinds of problems before they even get to you 🏆
This is the one: https://fosstodon.org/@eleventy/114110182403525096
With a special nod to GitHub user Jeffalo! (not on Mastodon)
which javascript framework do cybertruck owners use
regarding your moderately successful open source project: congratulations and I’m so sorry
Just encountered a *wild* JavaScript bug.
App code:
let myDate = DateTime.now();
Library code:
`myDate instanceof DateTime` was false, why??
First thought: multiple different versions of `DateTime` ("luxon") package installed via npm? Nope.
Actual culprit:
App code:
const { DateTime } = require("luxon");
Library code:
import { DateTime } from "luxon";
Luxon exports different versions of DateTime for CommonJS and ESM 😭 I may never trust `instanceof` again 😬 Best friend .contructor.name now
let’s keep what AI in w3.org/WAI/ means between us until after the investment checks have been written, ok
is this about AI yep
is this about politics yep
is this about billionaires yep
is this about masculinity yep
no one knows how anything works and the market for confidently wrong answers has never been better
anyway node.js just bails out silently when this happens so it’s decidedly not a fun issue to track down 😭
who among us hasn’t deadlocked node.js with two interdependent concurrency queues?? who!?!
Had a delightful conversation with @DavidDarnes and Matt Johnson about the unique space “Design Engineer” occupies in web development https://www.podcastawesome.com/2092855/episodes/16692493-what-the-heck-is-a-design-engineer-with-dave-darnes
Inspired by Dave’s recent blog post! https://zeroheight.com/blog/design-engineer/
Wrote this up on the blog: https://fediverse.zachleat.com/@zachleat/114082206353649121
📮 New blog post:
Extract Colors from an Image for CSS Themes: https://www.zachleat.com/web/extract-colors/
sim alttextman where we at on this
I propose that we use an llm. subdomain for LLMs to consume just like we *needed* an m. subdomain for mobile in 2010
This open source work is part of a larger migration of the Font Awesome blog (Blog Awesome) from WordPress to Eleventy, currently ongoing!
https://github.com/11ty/eleventy-import was also born from that too!
If you’re curious, I used the brand new `@11ty/image-color` to fetch the border colors from each site’s favicon/avatar: https://fosstodon.org/@eleventy/114076444351199781
The one nice thing about /llms.txt is that folks deeply entrenched in JavaScript-heavy webdev are now providing lightweight experiences of their content on the web (but for LLMs, not users — mind you)
automated themed screenshot border colors

lorem ipsum in /llms.txt
I’ve been playing around with extracting colors from favicon images as a shorthand for the theme colors of a website — can y’all think of a better or easier way? Something to do with using a site’s CSS directly?
this absolute banger flopping means that I am shadow banned by the mastodon algorithm
there can be no other explanation
I am an external opening of the rectum located inside the intergluteal cleft AITA?
any product page claiming use of AI without citing the model or what data set was used to train it does not get the benefit of the doubt any more (sorry not sorry)
this is much different than what WP Engine did because they’re reusing the unlicensed intellectual property of designers and not the openly licensed work of developers so its ok
the wordpress admin settings page is *wild*

and `strict: false` ain’t it:
--enabled --wat => "--wat"
Wishing that Node’s util.parseArgs allowed boolean|string types.
(empty) => false
--enabled => true
--enabled=value => "value"
https://nodejs.org/docs/latest/api/util.html#utilparseargsconfig
with all due respect (none):
Temperature or “Feels Like” Temperature: y’all need to pick one and roll with it
`any` as malicious compliance in a TypeScript codebase
today is a cold day in hell
The pairing of sibling “Server rendering is optional” and “Server Rendering is not just for SEO” sections here is a perfect example of how the React ecosystem doesn’t encourage good defaults.
https://react.dev/blog/2025/02/14/sunsetting-create-react-app#why-we-recommend-frameworks
?nodefine — a pattern to skip automatic Custom Element definitions
does anyone else feel like feature testing as a front-end practice went out of style? (wrongly so — it’s still super valuable!)