Jack

every time theres a dip in the markets

@j1nv3st bro this is nothinggggg, dca, don’t open app, come back in 5 years

Fun whilst it lasted, gonna sell and give it all up now.. Is there any news tied to why this happened?

@shadcn people doing something else ??

underrated: space-x-* and space-y-*

@thekitze get some fucking hobbies, get off this shit show

i need the wackiest ideas for losing weight at this point. except glp-1 i wanna have that as the ultimately last resort. pls do not give me the conventional advice. i know the math. i'm thinking of joining those "pay money and lose them if u dont lose weight" challenges lol

@thekitze its a phase, everyone will realise its grifting and move on to next thing, hopefully

i ... di not like the list of top podcasts... at all

@tannerlinsley @thekingnotorius literally the easiest thing

@thekingnotorius It's pretty simple actually. Use the Nitro Vite plugin and Vercel does the rest.

Es un dolor de culo subir una app de Tan Stack a Vercel. Qué pereza parce, no sé si es el ecosistema de Tan o el de Vercel, pero no están siendo amigables para el dev.

@jackfriks @dreamsofcode_io @DataFast_ @trust_mrr toooo beeee fairrrr, these are still ‘selling the shovel’ type products (ps i’m jealous and would take it 100%)

@dreamsofcode_io this dude literally made 2 saas in the last year to prove this wrong and reached over $30k mrr between @DataFast_ and @trust_mrr but you still dragging his name through the mud

This dude is making bank on selling products to people who want to make bank on selling products. Marc Lou is recursion in human form.

coffee bike-thru in amsterdam

@ryanflorence @thdxr pair-gooning, it's great

@thdxr Kent sent me a text asking if he could come over to show me some of his recent gooning

wait does gooning not mean coding?

@wesbos wtf me too, since a few days mine has started getting so slow

Really starting to feel my 5 year old MacBook M1 Pro max slow down. Mostly around video editing and capturing as resolutions get larger, but apps are starting to feel chuggy too. CPU is often pegged

why’s it always 1am when there’s a hack

@daniel_dot_xyz @tan_stack @TansTack does this affect bun install too? wasn’t mentioned in the release notes but assume they just missed it?

@tan_stack @TansTack Glad I added minimumReleaseAge to my Bun config earlier this year. Can’t recommend it enough.

SECURITY ADVISORY — TanStack npm packages A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package. Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down. Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys. If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised: • Rotate cloud, GitHub, and SSH credentials immediately • Audit cloud audit logs for the last several hours • Pin to a prior known-good version and reinstall from a clean lockfile Detection — the malicious manifest contains: "optionalDependencies": { "@tanstack/setup": "github:tanstack/router#79ac49ee..." } Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root). Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level. Full technical breakdown, complete package and version list, and rolling status updates: github.com/TanStack/route… Credit to the security researcher for responsible disclosure.

@tannerlinsley @DavidKPiano praise be, shouldn’t have doubted

@j3c7_ @DavidKPiano No, Start is unaffected. CloudFlare was mistaken and is updating the changelog

You either die a frontend library or you live long enough to become a full-stack framework with server-side vulnerabilities

@shabanhr @shadcn @efferdui funny, mine looks the same!

Can’t go wrong with the @shadcn. Clean or too clean?

@thekitze nice ref

now, be honest.

yo @vercel, someone gotta update the bun version when installing deps, 2m16 for bun 1.3.6, 16s for 1.3.13 had to add this to vercel config: "installCommand": "curl -fsSL https: //bun.sh/install | bash && ~/.bun/bin/bun install --frozen-lockfile",

@jacobmparis makes me think of that react talk where they showed the colocation of related hooks stuff, this goes even further, im liking it

am I the only one who thinks JSX is perfect as is

@trueadm hell yes, gimme dat

Happy to announce TSRX. Think it as the spiritual successor to JSX. We extracted it from Ripple, and made it framework agnostic. It can compile to React, Ripple and Solid, other frameworks to come soon. It's a TypeScript superset language, with a parser, compiler and a selection of plugins for editors + Prettier + ESlint, etc It's early alpha but we thought people might be interested in it. 🧵