A versioned archive of posts from Bluesky, Mastodon, GitHub, npm, YouTube, Letterboxd, Hacker News, and blogs. Browse the most popular posts.
Last built .
| Since | posts | replies | likes | reposts and quotes | views | |
|---|---|---|---|---|---|---|
| Bluesky | 1,039 | 8,236 | 23,127 | 2,380 | ||
| Mastodon | 2,399 | 29,156 | 55,396 | 16,820 | ||
| GitHub | 179 | 5,777 3,520 | 33,866 | 3,317 | ||
| npm | 139 | 1,546 | 75,991,720 | |||
| YouTube | 30 | 1,203 | 32,713 | |||
| Letterboxd | 55 | |||||
| Blog | 20 | |||||
| Hacker News | 59 | 575 | 802 | |||
| All | 4,807 | 37,967 | 114,394 | 22,517 | 76,024,433 |
We’ll be live in 5m: https://www.youtube.com/watch?v=-NkmUmq0JUQ
We’ll answer your questions about Font Awesome, Build Awesome, and the Kickstarter. Watch as @jabronus helps @zachleat assemble a Font Awesome keyboard! Test our multitasking skills!
Back the Kickstarter: https://www.kickstarter.com/projects/fontawesome/build-awesome-pro?ref=9n0yiq
Build Awesome (11ty) 7 likes5 reposts Original on MastodonOriginal on Blueskydangerously_pull_request_target
Zach Leatherman 10 replies 47 likes1 repost Original on BlueskyOriginal on MastodonUpdated my security checklist with a few additions from yesterday’s Tanstack compromise: https://www.zachleat.com/web/npm-security/#may-2026-additions
Zach Leatherman 7 replies 31 likes7 reposts Original on MastodonOriginal on Blueskyinb4 prediction markets add bets for npm package compromises
Zach Leatherman 9 replies 28 likes4 reposts1 quote Original on BlueskyOriginal on Mastodon(but really GitHub should retire `pull_request_target` or surface some kind of big ol’ warning on it)
Zach Leatherman 5 likes Original on BlueskyI wonder if the nice folks at @npmx.dev can add a big ol’ warning on packages sourced from repos that use `pull_request_target` 🫣
Zach Leatherman 5 replies 25 likes1 repost Original on BlueskyImportantly, `pull_request_target` IGNORES this GitHub security setting: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#controlling-changes-from-forks-to-workflows-in-public-repositories
This was very surprising to me.
Zach Leatherman 3 replies 7 likes2 reposts1 quote Original on MastodonA follow up here on action items (assuming you’re already using trusted publishers OIDC to scope releases to a single GitHub Action workflow):
1. Look for any `pull_request_target` GitHub Actions workflows! (this allows external forks/code to run your actions with write access ☠️☠️☠️☠️☠️)
2. Look for use of `cache` in your GitHub Actions release workflow (cache was poisoned/compromised by `pull_request_target` trigger)
Learn more about `pull_request_target`: https://securitylab.github.com/resources/github-actions-preventing-pwn-requests/
Zach Leatherman 4 replies 11 likes4 reposts Original on MastodonAnd here is an absolute masterclass in writing a post-mortem from the team: https://tanstack.com/blog/npm-supply-chain-compromise-postmortem
Zach Leatherman 10 replies 18 likes8 reposts Original on Mastodon“Socket detected 84 compromised TanStack npm package artifacts modified with suspected CI credential-stealing malware.” — @SocketSecurity
https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
Zach Leatherman 11 replies 9 likes7 reposts1 quote Original on Mastodon
Watched on Sunday May 10, 2026.
Watched on Saturday May 9, 2026.
Watched on Thursday May 7, 2026.
In this episode, we’ll walk through a few very early demos of the collaboration and editing features in Build Awesome Pro!
Come hang out — ask me anything! Let’s talk about Build Awesome (11ty), the Build Awesome Pro Kickstarter, funding open source through Kickstarter.
🔗 Back Build Awesome Pro: https://www.kickstarter.com/projects/fontawesome/build-awesome-pro?ref=63jze0
Cloudflare stock down 23.83% after announcing layoffs yesterday.
Zach Leatherman 6 replies 34 likes8 reposts Original on Mastodonthis is the kind of content that linkedin craves
my “Leather man” t-shirt has people asking a lot of questions that I feel like are already answered by my last name
“oh… that code was written by a model that was retired three years ago, the new model doesn’t know why it exists”
Going to stream in about 10m to show off three Build Awesome Pro editing demos, come hang out!
Zach Leatherman 2 replies 12 likes5 reposts1 quote Original on MastodonOriginal on BlueskyOoh how did I miss that the new Pagefind has a new Web Components-based UI (used to be Svelte)? https://github.com/Pagefind/pagefind/releases/tag/v1.5.0 Awesome work team!
Zach Leatherman 2 replies 28 likes1 repost Original on MastodonOriginal on BlueskyOptimizing Images with Eleventy on Netlify: kittygiraudel.com/2026/05/05/o... from @kittygiraudel.com
Build Awesome (11ty) 12 likes3 reposts Original on MastodonOriginal on Blueskywhew, feels good to be back to four hundos https://www.speedlify.dev/ssg/
Zach Leatherman 14 likes Original on MastodonI *just* learned earlier this week that UUID v7 adds a timestamp component so that the UUIDs can be easily sorted in the order they were created! 🏆
Node.js 26.1.0 is out, with a new `node:ffi` module, `crypto.randomUUIDv7()`, and many more features and bug fixes. Full changelog and download links at nodejs.org/en/blog/rele...
Zach Leatherman 11 replies 23 likes1 repost Original on BlueskyRE: https://front-end.social/@rem/116534370356477290
“A conference is a physical network of incredible people”—@joshnesbitt ❤️
Gemini — are you okay
Zach Leatherman 9 likes1 quote1 comment Original on Mastodonso… uh… how are we all doing
Zach Leatherman 50 replies 21 likes1 quote Original on MastodonOriginal on BlueskyRE: https://mastodon.gamedev.place/@jonikorpi/116533482887132644
any measure of web performance moving forward must include “Are you a human?” checks in metrics
Zach Leatherman 19 likes2 reposts Original on Mastodonchat — are we cooked
Zach Leatherman 11 replies 27 likes13 reposts Original on Mastodonfree prompt idea: best tool to create a web site with zero javascript without suggesting that I go back in time to prevent sarah connor from creating javascript
proud to introduce my new app that shuts down your computer when it hears your voice say “can everyone hear me okay”
I’m calling it immutable
Zach Leatherman 9 replies 26 likes2 reposts Original on Mastodoninb4 they start talking about powering it with ethanol corn
Zach Leatherman 4 likes Original on BlueskyWhoa, this is a *wild* stat: “Utah as a whole uses about 4 gigawatts. At full buildout, the Stratos campus is expected to use 9 gigawatts”
Ignoring community opposition, Box Elder County, Utah, has approved a 9 GW data center campus powered by onsite fossil gas. Utah as a whole currently uses 4 GWs. Also: the developers have rights to 13K acre-feet of water in this water-stressed region, most of which will be used by the gas plants.
At contentious meeting, Box Elder County OKs massive data center project backed by a celebrity investor
Facing hundreds of protesters who oppose the project, the Box Elder County Commission cast its final vote on a massive data center campus.
Today we’ll have a special demo from Dave Gandy, who has been building a color theming tool!
As always, hang out — ask us anything! Let’s talk about Build Awesome (11ty), the Build Awesome Pro Kickstarter, funding open source through Kickstarter. Show me your web site! Tell me what you like and/or don’t like about your current deployment system/CMS/host!
🔗 And of course: back Build Awesome Pro: https://www.kickstarter.com/projects/fontawesome/build-awesome-pro?ref=3y9mok
In a few minutes we’ll be hopping on a live stream to chat about theming, color, Build Awesome, and our Kickstarter campaign!
Join us!
Build Awesome (11ty) 7 likes2 reposts Original on MastodonOriginal on Blueskywordpress is 22% of all web sites. 22% of web sites are literally just there to capture devops energy. We have a way of doing that way more efficiently now!
Zach Leatherman 2 replies 16 likes Original on Bluesky
I guess you got one “Fuck” in a PG movie in the 80s
@keithamus how do you say your last name? I was maybe going to talk about your color game on a stream tomorrow but I wanted to know if it was like circle or kirk?
(co-writing credit to my daughter)
Zach Leatherman 9 likes Original on Mastodonuber-goober: a person that always chooses a ride-hailing app over public transportation
Zach Leatherman 5 replies 29 likes8 reposts Original on BlueskyOriginal on Mastodon
Watched on Saturday May 2, 2026.
A plugin to use Vite as a development server and run Vite to postprocess your Eleventy build.
you made `this`?
[`this` ingested as training data to model]
[model recreates “new” unattributed thing extremely similar to `this`]
I made `this`
Zach Leatherman 3 replies 12 likes2 reposts Original on MastodonI really like Google Search’s stated mission to “organize the world's information and make it universally accessible and useful” but I’m curious what organizations do y’all think are most ideally invested in that mission?
Wikipedia seems like an obvious one. Internet Archive seems like another. Any others?
Zach Leatherman 9 replies 24 likes4 reposts Original on MastodonOriginal on Blueskycodex isn’t blocking mentions of possums, notably
how many ’e’s are in the word goblin
Zach Leatherman 14 replies 17 likes1 repost Original on MastodonOriginal on Bluesky
Come hang out — ask me anything! Let’s talk about Build Awesome (11ty), the Build Awesome Pro Kickstarter, funding open source through Kickstarter. Show me your web site!
🔗 Back Build Awesome Pro: https://www.kickstarter.com/projects/fontawesome/build-awesome-pro?ref=48tebl
I… uh… forgot to run `npm install` after I switched branches. That’s why my demo didn’t work 🫣😅
Look, stuff is a little hectic right now…
Going to be SUPER CASUALLY hanging out here live in a few, discussing Build Awesome (11ty) Pro and the Kickstarter campaign.
Come hang out! AMA (sure — anything, what could go wrong?)
Zach Leatherman 13 replies 12 likes4 reposts Original on MastodonOriginal on BlueskyIt’s day two of our Kickstarter campaign to help lower the bar for anyone to publish and maintain a web site!
Learn how you can help: https://www.11ty.dev/blog/build-awesome-pro/
Build Awesome (11ty) 12 likes4 reposts1 quote Original on MastodonOriginal on BlueskyTomorrow we’ll have a super casual AMA about Build Awesome (11ty), Build Awesome Pro, the Kickstarter, and our vision for the future of publishing and collaboration on the web.
Maybe show me your web site. Ask general questions about web development? Look, I don’t want to get too prescriptive here 😅
Build Awesome (11ty) 4 replies 14 likes5 reposts Original on MastodonOriginal on BlueskyBack Build Awesome Pro to help us add superpowers to your static site: https://www.kickstarter.com/projects/fontawesome/build-awesome-pro?ref=15qir9
Build Awesome (11ty) 5 replies 16 likes21 reposts6 quotes Original on MastodonBack Build Awesome Pro to help us add superpowers to your static site: www.kickstarter.com/projects/fon...
Build Awesome Pro
A better way to build web sites. Fast, flexible, and built to last.
Build Awesome (11ty) 18 likes11 reposts3 quotes Original on BlueskyLaunching in 230000 milliseconds: https://www.kickstarter.com/projects/fontawesome/build-awesome-pro?ref=43ttgb
Build Awesome (11ty) 6 likes2 reposts Original on BlueskyOriginal on Mastodonhave your <del>people</del> markdown files talk to my <del>people</del> markdown files
Zach Leatherman 2 replies 43 likes4 reposts1 quote Original on Bluesky
Watched on Sunday April 26, 2026.
is there a compound word more tragically ambiguous than lunchmeat
Low level utility to perform build-time image transformations.
As `sizes="auto"` starts to ship in more web browsers, take note that Image v6.0 is already ready for it (when using `loading="lazy"`) https://github.com/11ty/eleventy-img/issues/207
Build Awesome (11ty) 29 likes9 reposts Original on BlueskyOriginal on Mastodonif you see a suspicious tab on my screen, just assume it was this
Introducing Tab Snitch
Liven up your screenshots and make co-workers uncomfortable with errant open tabs.
Zach Leatherman 15 likes Original on Bluesky“Do I belong in tech anymore?” from Ky Decker (not on Masto) https://ky.fyi/posts/ai-burnout
Zach Leatherman 23 replies 272 likes239 reposts7 quotes Original on Mastodonamen
the shrimp jesus of software
Zach Leatherman 12 replies 12 likes2 reposts Original on MastodonOnly 436M milliseconds left to get notified before launch: https://www.kickstarter.com/projects/fontawesome/build-awesome-pro?ref=15qir9
Build Awesome (11ty) 13 likes2 reposts1 quote Original on BlueskyOriginal on MastodonCollaborative Editing as Progressive Enhancement: https://www.11ty.dev/blog/collaborative-editing/
Build Awesome (11ty) 6 replies 23 likes11 reposts Original on BlueskyOriginal on Mastodon Zach Leatherman 2 likes Original on Blueskyanyway, it’s particularly juicy that the original compromise came from trying to cheat at roblox? https://www.infostealers.com/article/breaking-vercel-breach-linked-to-infostealer-infection-at-context-ai/
Zach Leatherman 3 replies 5 likes5 reposts Original on Mastodonluv 2 🔄 access tokens
Marginally annoyed that Intl.RelativeTimeFormat#format doesn’t support "millisecond" as a unit.
I get it: why would anyone want to show milliseconds??
A plugin to use Vite as a development server and run Vite to postprocess your Eleventy build.
A plugin to use Vite as a development server and run Vite to postprocess your Eleventy build.
A plugin to use Vite as a development server and run Vite to postprocess your Eleventy build.
The future of dynamic editing on static web sites (without infrastructure lock-in!) is coming — and there are only 670M milliseconds left to get notified: https://www.kickstarter.com/projects/fontawesome/build-awesome-pro?ref=43ttgb
Build Awesome (11ty) 26 likes9 reposts Original on BlueskyOriginal on Mastodonoh… well, Claude’s desktop app preemptively configures any current and future local browsers to allowlist these extensions just in case you might use them some day: https://www.thatprivacyguy.com/blog/anthropic-spyware/
Zach Leatherman 1 reply 18 likes9 reposts Original on MastodonOriginal on Blueskylove the design aesthetic of ever-so-slightly-translucent paper — has anyone done this on the web?
leaked software industry training manual (2026)
— natemoore on elm street 👻 (April 20, 2026 at 2:25:27 PM UTC)
Zach Leatherman 7 replies 58 likes Original on BlueskyI live 4500 miles away from @beyondtellerrand.com (an extremely good event happening very soon). If you live closer than me, you don’t have a good excuse to skip! Get your ticket!
Zach Leatherman 11 replies 12 likes2 reposts Original on BlueskyParse front-matter from a string or file. Fast, reliable and easy to use. Parses YAML front matter by default, but also has support for YAML, JSON, TOML Front-Matter, with options to set custom delimiters. Used by metalsmith, assemble, verb and many other
holy forking shirtballs this is maybe the best ice cream flavor I’ve ever had
Zach Leatherman 5 replies 19 likes1 repost Original on MastodonWe’re starting to ramp up final_FINAL_v2: sign up to be notified when it launches!
https://www.kickstarter.com/projects/fontawesome/build-awesome-pro?ref=81sqou
Build Awesome (11ty) 11 likes10 reposts Original on MastodonWe’re starting to ramp up final_FINAL_v2: sign up to be notified when it launches!
www.kickstarter.com/projects/fon...
Coming soon: Build_Awesome final_FINAL_v2
A better way to build websites. Fast, flexible, and built to last.
Build Awesome (11ty) 21 likes6 reposts1 quote Original on Blueskyuse claude mythos to log in to your wordpress instance because it’s easier than unlocking your password manager
Zach Leatherman 1 reply 49 likes1 repost Original on Blueskyare folks actually using this feature? seems like a wild risk of security exposure to give it unfettered access to all of your web sessions/tokens https://claude.com/claude-for-chrome
thinking about how this interacts with password manager browser extensions that automatically log-in to various sites (with 2FA too)
Zach Leatherman 45 replies 19 likes4 reposts1 quote Original on MastodonOriginal on Blueskythe skies are always bluer
Zach Leatherman 3 replies 6 likes1 quote Original on Mastodonthe sky is always bluer
JavaScript addition using the new and upcoming Math.sumPrecise():
❌ 1 + 0.1 - 1 = 0.10000000000000009
✅ Math.sumPrecise([1,.1,-1]) = 0.1
❌ 1e20 + 0.1 - 1e20 = 0
✅ Math.sumPrecise([1e20,.1,-1e20]) = 0.1
❌ 0.1 + 0.2 = 0.30000000000000004
❌ Math.sumPrecise([.1,.2]) = 0.30000000000000004
Math.sumPrecise() - JavaScript | MDN
The Math.sumPrecise() static method takes an iterable of numbers and returns the sum of them. It is more precise than summing them up in a loop, because it avoids floating point precision loss in inte...
Zach Leatherman 5 replies 33 likes9 reposts1 quote Original on BlueskyJavaScript addition using the new and upcoming Math.sumPrecise():
❌ 1 + 0.1 - 1 = 0.10000000000000009
✅ Math.sumPrecise([1,.1,-1]) = 0.1
❌ 1e20 + 0.1 - 1e20 = 0
✅ Math.sumPrecise([1e20,.1,-1e20]) = 0.1
❌ 0.1 + 0.2 = 0.30000000000000004
❌ Math.sumPrecise([.1,.2]) = 0.30000000000000004
Read more on MDN: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Math/sumPrecise
Zach Leatherman 23 replies 16 likes4 reposts Original on Mastodonallbirds language models (large) will offer both men’s and women’s (US, UK) sizing
Zach Leatherman 11 replies 33 likes1 repost Original on BlueskyOriginal on MastodonHere are the Web Platform features sorted by upcoming Widely Available status: https://webstatus.dev/?q=baseline_status%3Anewly&columns=name%2Cbaseline_status&column_options=baseline_status_high_date&sort=baseline_status_asc&num=100
HT https://bsky.app/profile/alangdm.bsky.social/post/3mjkakj4ofc25
Zach Leatherman 6 likes3 reposts1 quote Original on MastodonA ha, here’s the thing: webstatus.dev?q=baseline_s...
Thanks @alangdm.bsky.social!
Has anyone made a Web Platform Baseline calendar but showing when features swap from Newly available to Widely available (+30 months)?
Zach Leatherman 17 replies 7 likes2 reposts Original on BlueskyOriginal on MastodonA minimal, modern, generic, hot-reloading local web server to help web developers.
Watched on Sunday April 5, 2026.
Watched on Friday April 3, 2026.
I see that @rknight.me has added the Official* HTML logo as an 88×31 in their page footer!
mathematically speaking 89.99999% has six nines
IT'S HAPPENING
GITHUB, THE FIRST ENTERPRISE CLOUD SOLUTION TO REACH ZERO NINES RELIABILITY
https://mrshu.github.io/github-statuses/
Zach Leatherman 9 replies 43 likes4 reposts1 quote Original on Blueskyevery previous human excursion to the moon scaled to handle a maximum of three concurrent human requests and the artemis II sent four
nasa.gov is having some trouble: “HTTP 429 Too Many Requests”
