@Fyrd a ha — sorry to bug you! this suggests they are bundled together: https://github.com/web-platform-tests/interop/issues/768

@Fyrd If I were looking for the browser support for implied `hidden="until-found"` behavior for `<details>` — is that somewhere? Or is it just a part of until-found stock?

I didn’t use en-dash here and I’m ashamed of it

How old is the oldest (non-personal) software project that you’re still actively maintaining?

at 42 boosts I’m lucky I didn’t have to make any hard decisions

dear tim apple: a “time to stand!” notification from your watch when a very anonymous individual (not me) was sitting on the toilet is wild

Today on Trans Day of Visiblity I’m thankful to folks living their lives in an unapologetically authentic way — truly showing us what freedom can look like when we discard the baggage society has imposed on all of us. Love y’all.

I’m proud of this project 🥰 I worked hard on it and it turned out great!

I’m thankful we didn’t add a bunch of third party JavaScript or overbearing analytics or advertisements — feels good to work with good folks.

which web sites did the FBI warn us about? wrong answers only

boosting this is an attack!!

can we have a feature where a toot self destructs when it hits 50 boosts

you’re telling me this antivirus software I bought doesn’t stop posts from going viral

@hexagoncircle absolutely no obligation but I wonder if you can escalate this somewhere https://urbanists.social/@cassey/114218933743717085

The @SocketSecurity folks have quickly fixed this one:

https://bsky.app/profile/socket.dev/post/3ll5dewnrx22b

it’s hard not to be jaded when facial recognition is being used in criminal investigations while our industry is having trouble accurately testing whether two strings are equal

Update: thanks to @chrisw_b for hunting this down: looks like a huge flaw in the vulnerability scanner being used by these tools (it ignores namespaces on package names!)

More info:

https://github.com/jridgewell/gen-mapping/issues/12
https://github.com/anchore/grype/issues/1701

Why does socket.dev report that the latest version of next.js has a malware dependency? https://socket.dev/npm/package/next/alerts/15.2.3?tab=dependencies

“Malicious code in gen-mapping (npm) Any computer that has this package installed or running should be considered fully compromised.”

Update: looks like this is a pretty big flaw in the vulnerability scanner — not in next (check the replies for more info)

ha ha ha licenses aren’t good vibes — we’re coding only with vibes now

this winter storm is making the power go out every ten minutes — my external monitor is on battery backup and my internet connection automatically swaps to my phone hotspot — unfortunately even in the middle of nowhere I can seamlessly continue working weeeeeee

Another great point in discussion with @_web_:

These designs are from 1987 🤯 when the state of the art in operating systems looked like this:

@wiredprairie shared this lovely video with me about some of the folks that worked on LCARS and it has me wanting to apologize for how little substance the above critique had — Sorry! Not to say that LCARS isn’t without flaws but I wish I had been more productive in my armchair review.

Here’s the video: https://www.youtube.com/watch?v=D24tYFIVyv0

CEO selling AI claims “90% of code will be written by AI in 3–6 months; 100% in 12 months.“

https://www.businessinsider.com/anthropic-ceo-ai-90-percent-code-3-to-6-months-2025-3

set your calendar reminders, folks — and remember that hype is a monetizable asset (in silicon valley)

let me just say up front that I love Star Trek—but we have to agree that LCARS is not good UI. societal utopia, sure—where are the user interface folks

the timeline is always connected if you’re paying attention https://mamot.fr/@nhoizey/114171893736072813 cc @nhoizey

for my non-USA friends: do you understand the concept of “buffet pants”

everything’s computer (pejorative)

@import() maps for CSS

SAASquatch

…is that something? fine, no you’re right

are we ready to reconcile how many tech spaces have at least one anger-as-a-personality-substitute man that everyone just tolerates (if not idolizes)

classic wordpress.

PageSpeed Insights offers some WordPress specific advice on this web site with a 9.5s TTFB:

> Choose a lightweight theme (ideally a block theme) and implement full-page caching or a static site solution. Disable unnecessary plugins to minimize server overhead. Consider upgrading your hosting to managed or dedicated service.

how dare you clean up the spelling and/or grammar on that toot immediately after I boosted it — I loved it as it was

Let’s talk about why Baseline browser compatibility doesn’t tell a complete story about whether or not a feature can be used “safely” by developers.

Consider `accent-color` (Not Baseline) versus CSS Nesting (Baseline 2023).

Browser compatibility is only a small piece: it’s far more important to consider the role the feature plays and how progressive-enhancement friendly that feature is.

CSS Nesting requires cross-browser ubiquity before use: `accent-color` is much safer, comparatively!

dismissing valid feedback as “change aversion” is a big ol’ red flag 🚩🚩🚩

this poll toot will probably self destruct at some point

*runs away*

the rise of developer celebrity has made software:

What I really want are issues to not be Open nor Closed but a third quantum physics style super-positioned state: Limbo

At first I was excited that this might be a nice replacement for the closed issue needs-votes “Enhancement queue” we use in Eleventy (https://github.com/11ty/eleventy/issues?q=label%3Aneeds-votes+sort%3Areactions-%2B1-desc+label%3Aenhancement) but alas, it doesn’t seem like it

Seeing Issue Types appear on the GitHub UI https://github.blog/changelog/2025-01-13-evolving-github-issues-public-preview/#organize-your-work-with-issue-types

and I’m left wondering: how is this better than labels? What unique benefit does it offer?

HTML is good, actually: https://www.zachleat.com/twitter/1169998370041208832/

Look, if we’re going to lean into sites versus apps 🥱 and MPA 🥹 and SPA 😬 have already encrusted their way into the discourse — what about MPS and SPS 😅 (this is a joke don’t use these)

anyway an SPS can go a long way before it needs to be an MPS (and you need a build step to help with duplicated boilerplate)