Claudio Wunder

2.3K posts

Claudio Wunder banner
Claudio Wunder

Claudio Wunder

@wunderacle

Platform Engineering @HubSpot — open source at @nodejs @webpack @gnome and open governance at @openjsf.

Germany Katılım Kasım 2022
520 Takip Edilen1.5K Takipçiler
Claudio Wunder
Claudio Wunder@wunderacle·
You know what, after years of expensive PCs, the Steam Machine is going to be my next PC for Open Source development, gaming and personal usage. I'm pretty sure I'm going to rock it with CachyOS to get the best of performance.
English
0
0
5
404
Dino
Dino@dinokupinic·
is there no options to hide the partners panel on @tan_stack?
Dino tweet media
English
17
0
52
25.5K
ahmet
ahmet@bruvimtired·
me when i read some of your tweets
ahmet tweet media
English
37
1
177
15K
Claudio Wunder retweetledi
Node.js
Node.js@nodejs·
Another day, another Node.js release 😎 Node.js 24.16.0 is out! A few test runner features, `randomUUIDv7`, plus many more bug fixes and small improvements. Full changelog and download links: nodejs.org/en/blog/releas…
English
3
44
347
24.9K
Claudio Wunder retweetledi
Node.js
Node.js@nodejs·
Node.js 26.2.0 is out! ✨ `stream.compose` is now stable, `node:fs` integrates with the new `Temporal` API, and a fair load of bug fixes. Full changelog and download: nodejs.org/en/blog/releas…
English
10
71
638
35.5K
Claudio Wunder
Claudio Wunder@wunderacle·
What I think of investors that somehow miraculously think AI is going to replace SaaS any time soon:
Claudio Wunder tweet media
English
0
0
3
84
SaltyAom
SaltyAom@saltyAom·
Nodejs, please adopt web standard request response http server please 😭🙏 The entire JavaScript ecosystem has already adopted it except you at this point 😭
English
0
0
0
79K
Claudio Wunder
Claudio Wunder@wunderacle·
These are no fun times to be an Open Source maintainer. Security incidents all the time.
English
0
0
3
128
Claudio Wunder
Claudio Wunder@wunderacle·
Sending warm hugs to @tan_stack, the moment I read in their postmortem that they were using steps with pull_request_target I immediately knew, their Actions Cache got poisoned. This is the sort of silly mistake even veterans can easily be targeted, and yet another reason why GitHub should deprecated pull_request_target and improve the default security of GitHub Actions.
English
2
0
2
201
Claudio Wunder
Claudio Wunder@wunderacle·
Which ends up in a default of having no trust on changes to your workflows by 3rd parties and intensive scrutiny to any changes involving them. We genuinely need better default security mechanisms within GitHub Actions Workflows. From preventing malicious eval, from defaulting a more secure runner, like the Hardener Runner, and much much more.
English
0
0
1
52
Claudio Wunder
Claudio Wunder@wunderacle·
It is unfathomable how many steps we often need to go to secure our GitHub Actions workflows. There is just too much. I'm lucky that @GitHub provided me and my team training through the GitHub Secure OSS Fund program, but still, if your project has many collaborators it is hard to keep track of all the changes your workflows may or not have.
English
1
0
1
65
Claudio Wunder retweetledi
VoidZero
VoidZero@voidzerodev·
🚀Rolldown 1.0 is here!🚀 Rust-based high-performance JavaScript bundler. 🏎️ Runs at native speed that’s 10~30x faster than Rollup 🤝 Compatible with existing Rollup & Vite plugins ⚡The underlying bunder for Vite 8 After 2 years, Rolldown is officially stable and has 20+M weekly downloads. Companies like Framer & PLAID are already using Rolldown in production. Thank you to every contributor, user, and team that helped us get here.
VoidZero tweet media
English
33
403
2.6K
305.5K