Tim Haines 🇺🇦

Props to Ferrari for getting everyone talking about their new car.

They did, it was called America

@pnpmjs security over speed is the right default.

This is due to additional checks that pnpm performs on a lockfile that was generated not locally. We will add an option to disable it, which should be safe for projects don't accepting contributions from outside collaborators. Also we'll document some ways to cache verification

@Nick_Davidov E2 and E3 visas as well?

The biggest bullshit move by DHS in its history. So everyone on a O1 or H1B visa would have to stop working legally in the US, go back to their country and wait for years of backlog? This includes top scientists in our universities, founders of billion dollar companies (at least 3 just in our portfolio would be affected by the way). And if we look at individual countries it becomes even more bs. Indians would have to wait decades. Russians don’t have anywhere to go (there is no US embassy in Russia, hello?). This is the worst imaginable way to disrupt important work for the country and pretend you’re fighting some loophole.

@zeeg Ah, got me excited that S2 is out.

Mobland is great btw

@rough__sea Is it resolved? Appeal likely?

@eastdakota Change reporting policy to convictions rather than arrests if you’re id’ing someone. Do not take money from the guy.

Have a problem I genuinely would love input on. My wife and I own a local newspaper. In our town the police arrested a member of the community for having what they thought were naked pictures of a juvenile on his phone. Held him for days. Turns out, it was his own kid and none of the pictures were sexual. Terrible. Newspaper we own reports on it. Just the facts. Also report on when he’s released and there are no charges. Exactly what local news should do. He sues us and the local radio station, which had also reported on the arrest. We’re like: dude, we just reported the facts. Radio station settles (not sure terms). We push on because we did nothing wrong and the nature of a newspaper is reporting what happened. So we win. No cause of action against the paper. And then we, under statute, get awarded attorneys fees. They amount to tens of thousands of dollars. So what’s the right move? I don’t particularly care about the money. But I do want to discourage other caseless plaintiffs against suing us. Has been a costly distraction. But also seems wrong to bankrupt the guy. Genuinely looking for what to do next…

@conductor_build linear integration broken atm? Starting a workspace from a linear issue doesn’t seem to be populating it into the context anymore.

@mrlubos @jayair yeah, I added my email about 30 minutes ago.

@TimHaines @jayair <3 months. Are you interested in using it? Did you leave your email on the website?

Anthropic somehow keeps buying things that we are actively trying to move away from

@mrlubos @jayair What's your totally non-committal ETA for Python? Are we talking closer to one month or 3+ months?

@TimHaines @jayair Appreciate it! There aren’t many honest companies in this space, trying to stay away from that pack. Yes, TypeScript only. Working on Python now

@riskybusiness starting to feel like you might need to lengthen the show soon to fit all the news in. I wouldn’t complain.

Is everyone hearing a lot of Vanta ads on podcasts or am I just being targeted somehow?

Oh oh

@mrlubos @RattrayAlex @StainlessAPI @AnthropicAI Why was Stainless sponsoring you? You’re a competitor right? Or am I misunderstanding?

Congratulations to @RattrayAlex and @StainlessAPI on getting acquired by @AnthropicAI! Hey API quite literally wouldn’t exist without you and your support over the years.

@mrlubos @jayair Oh. Wording was “actively trying to move away from”. Not past tense yet. You only officially support typescript right now right? I like your marketing page’s bold warning that it’s one of the reasons hey might not be right for you.

@TimHaines @jayair They switched a while ago. But yes, language support is one of the main constraints at the moment

@zkochan @liran_tal Mind blown, did not know about this.

@liran_tal You run "pnpm audit --fix" and exclusions for those packages are automatically added to pnpm-workspace.yaml.

I think the real question about pnpm and the minimum release age directive is - How do we reconcile security fixes with the package release date guards? @zkochan thoughts?

Big day for speakeasy - Anthropic acquired their main competitor and is shutting it down. Time for OpenAI to migrate.

@krzyzanowskim Ha, what issues are you hitting with it?

who's building a WorkOS replacement out of spite?

@runaway_vol how do Japan's onsens fit into this? Seems wrong.

There is a strong negative correlation between a nation's wealth and its proclivity for nudity. There is only one outlier, and of course it's Germany