Wei
994 posts

Wei retweetledi

‼️Do not npm install or deploy anything right now
Supply chain attack on axios 1.14.1 - even if you don’t use axios it may be a nested dep.
Pin versions or wait until this is resolved
Maxwell@mvxvvll
@npmjs @GHSecurityLab there is an active supply chain attack on axios@1.14.1 which pulls in a malicious package published today - plain-crypto-js@4.2.1 - someone took over a maintainer account for Axios
English

I just claimed my .agent domain and joined the .agent community! get yours now and help shape the future of autonomous agents #CIEMAK7J" target="_blank" rel="nofollow noopener">agentcommunity.org/join#CIEMAK7J @agentcommunity_
English
Wei retweetledi

I've been following @better_auth since the 0.x days. I was an early adopter, actively asking for help on their Discord, filing issues, and building with it. The library itself is great — a massive improvement over AuthJS auth/core. But their release engineering has been consistently problematic. Here's why. 1/
English
Wei retweetledi

We at Mozilla feel that WebAssembly has been a second-class citizen on the web for long enough. You shouldn't have to go through JS to do everything.
This is probably a lot of what I will be focusing on for work in 2026!
hacks.mozilla.org/2026/02/making…
English
Wei retweetledi

OK Prisma 笑话时刻
他们说他们在 7.3 修复了性能回退的问题。但是是真的吗?
很明显不是,我们测试,7.3 还是比 6.x 慢了 40% 以上,在更现代的硬件上,这个性能可能会被拉大到 50% 以上
问题在哪呢?还是 WASM。我们做了 Profile,你能看到 WASM 带来的性能劣化会拖慢整个 Event Loop 的调度
所以 Prisma 简直是我今年的笑话来源。ORM 权威推荐 @DrizzleORM
-------
OK Prisma Comedy Hour
They said they fixed the performance regression in 7.3. But is it really fixed?
Obviously not. We tested it, and 7.3 is still over 40% slower than 6.x. On more modern hardware, this performance gap might even widen to over 50%.
Where's the problem? Still WASM. We did profiling, and you can see that the performance degradation from WASM slows down the entire Event Loop scheduling.
So Prisma is literally my source of jokes this year. For ORM, I authoritatively recommend @DrizzleORM

中文
Wei retweetledi

I'll say it again, I think this AI cycle we are in is a net negative on society
A man/team that has made the web significantly more pleasant as a platform for many people and spent years doing so for free has AI effectively destroy the business model by first taking his work
And this is how a member of the community responds. Real sad times
IP theft is real and I personally think that the C-suite of these current companies deserve jail time for the level of theft they enabled

English
Wei retweetledi

Everything is going to be fucked real soon.
#issuecomment-3717222957" target="_blank" rel="nofollow noopener">github.com/tailwindlabs/t…
English
Wei retweetledi
Wei retweetledi

Introducing the new React Aria docs! 🎉
All-new content and search experience. Interactive CSS and Tailwind examples to get you started quickly – just install with shadcn. New guides and full example apps. MCP server and AI integrations.
Check it out! react-aria.adobe.com
English
Wei retweetledi

github.com/unnoq/orpc
我唯一指定 TypeScript 框架,类型完备,DX 绝佳,使用体验比 Fastapi 好了 100 个 Next.js
中文
Wei retweetledi
Wei retweetledi

Cloud marketing convinced a generation of programmers that the scariest thing in the world was to connect their own server to the internet. All so they could be sold and resold the same centralized dependencies at huge markups.
youtube.com/watch?v=-cEn_8…

YouTube

English
Wei retweetledi
Wei retweetledi








