jdx

@VodkaAndApathy @OrevaZSN I've definitely stayed in 4-stars with broken fridges

@jdxcode @OrevaZSN Tell you stay in cheap motels without actually telling us. 🤣🤣

I do not understand ice dispensers in hotels. I've never needed ice whilst staying at one, yet every hotel tells you where the ice machine is. Then I see people filling those little buckets. What are you all doing with the ice? Am I missing something?

@sireilisa It’s the bark you get from smoking brisket

Why is the outside of the beef that color?

@Shpigford You should privatize it, don’t even worry about keeping up an archived copy. You have no obligation to do that. OSS is for different kinds of products which you aren’t building.

i'm torn on the OSS part of knockoff.co i initially made it OSS because i figured i wouldn't really do much with the extension long-term (was literally a weekend project on a whim for something i needed). but now there's a LOT more stuff i've got in the works to expand functionality and it's increasingly making *less* sense to keep the whole thing fully open, mainly around making sure we don't give the less-than-legitimate brands an easy/obvious way to bypass detection algorithms. thinking of basically freezing the current repo to leave public for anyone to use with the basic name-heuristics-based detection, but then going forward the full app (that's becoming substantially more powerful) will be closed-source. i know folks have feelings around that, but just thinking out loud here on how to balance all of that.

@mxcl I’m probably overthinking this but in my west coast accent "automic" and "atomic" are pronounced identically. Is that how it’s supposed to be? Or should I force myself to read it as "aw-tah-mic"

@maxedapps Us maintainers went to town locking shit down, hardening our release infra, and whitehats started spamming obviously bad practices like pull_request_target. The low hanging fruit is thankfully gone now.

Have all those JS supply chain attacks suddenly stopped, am I not seeing them anymore in my bubble, or am I missing something?

@theozero @mxcl Proxies destroy DX

@jdxcode @mxcl When you say “separate proxy server” do you mean additional infra? Or against using a proxy altogether? Varlock’s new credential broker (not yet released) lets you boot up proxy sidecar on the same machine very easily. Either oneshot wrap a command or boot and then connect to it.

All new Automic Vault almost ready. Tightened scope to securing your local developer environment to prevent agents and malware getting out CLI tool tokens, secrets or credentials and gating usage for sensitive actions at the source: the packaging layer.

@mxcl It’s a problem I’ve been thinking about a lot, I think you’re closer than anyone yet to cracking it

Hyped to hear that JD. Automic Vault doesn't solve *all* secrets problems, but it solves ones that nobody else is even trying to. And its primitives could in theory be used to solve the rest—for local issues anyway. We are unlikely to become a general secrets solution that stretches to remote places anyway. Anyway. Proper v2 release soon! I hope you like it. You make great things.

@evanyou @colinhacks no hard feelings! enjoy your vacation!

@jdxcode @colinhacks I should’ve reached out to you first, sorry for the drama!

I could see aube having a bigger future as an embedded pm over a standalone pm, especially if it were in nub and vite. If that changes your thinking about vendoring at all @evanyou definitely let me know. Definitely opening to making aube a collective with you and @colinhacks as equal owners too

@colinhacks Good to know! All I want is @jdxcode and aube getting the recognition where deserved.

@thdxr @colinhacks @evanyou You never replied back!

@colinhacks @evanyou i also messaged him a bit ago about embedding

It’s so good! Moved off of chezmoi last week github.com/jclem/dotfiles…

@sanil_lad @NotionHQ I appreciate that, does github work for you? github.com/jdx/ I can have a look at making a stripe form for that too though

@jdxcode @NotionHQ @jdxcode Was looking to just give a one off private donation as a general fan (insert in value you can afford situation), but couldn't find a option on site?

thanks to @NotionHQ for sponsoring mise development! jdx.dev/sponsors

@nullvoxpopuli *rust applications

@jdxcode then you either have very very very few JS dependencies if any at all, or none of them have expectations of one another the problem is with JS "ecosystems" that try to build on a shared understanding of conventions, apis, etc from other libraries

peer dependencies are a required concept in package management. however, it's amazing that absolutely no one can maintain them across packages correctly (including myself, mind you)

@dhh lol I just bought one last week! it's incredible!

I've been a Tesla convert for years. Model X, Model S Plaid, Cyberbeast. But the Model Y we just got still blew me away! It feels so tight, so well built, so right. Unbelievably good car and good value. It sending an Aston Martin DBX 707 and Taycan Turbo S out of the fleet!

@nullvoxpopuli I only ship client applications to questionable devices lol

@jdxcode in all backend environments there is no penalty for duplicate dep graphs or even duplicate versions of the same dep space is free, and you aren't shipping all that to users over unstable connections on questionable devices

yay!

@excid3 Yeah aug 1

@jdxcode Is the precompiled Ruby still slated to become a default in like August?