Khafra

- node.js collaborator (fetch and websocket maintainer).

[Khafra @KhafraDev]

@ritakozlov @voidzerodev @Cloudflare @vite_js That was fast

[Khafra @KhafraDev]

insanity

[Khafra @KhafraDev]

@MrFlashAccount @saltyAom There is a difference between a request and a response.

new Hono().post('/upload', async (ctx) => {
const fd = await ctx.req.formData() // ...
})

Any POST request to /upload can now DOS your app.

"deprecated Document that this is no longer the preferred way." jsdoc app

[Khafra @KhafraDev]

@MrFlashAccount @saltyAom Or you use an http server that exposes Request/Response, like hono and elysia, and thus subjugate your app to being DOSed. Yes, we don't expect every developer to understand the spec internals, which is why we recommend not using it. It's literally jsdoc, you can ignore it.

[Khafra @KhafraDev]

@saltyAom How does a streaming parser prevent any issues when at the end of the day all of the FormData fields are buffered in memory? It's also a spec thing. "Right now there is no way to call formData on arbitrary user input without potentially causing an OOM"

https://t.co/bQhLYHQmY0

[Node.js @nodejs]

Node.js 26.1.0 is out, with a new `node:ffi` module, `crypto.randomUUIDv7()`, and many more features and bug fixes.

Full changelog and download links: https://t.co/9VpqhfN1gE

[Khafra @KhafraDev]

@kettanaito @jarredsumner Yes, absolutely! I very much dislike ai generated PRs from people who aren't maintainers. There's a certain issue that has had 3 separate pull requests opened, with 0 human review on the author's end. Do these people think that their Claude tokens are more valuable than mine?

[Artem Zakharchenko @kettanaito]

They would put a substantial burned on maintainers as LLM-authored pull requests take a significantly more effort to go through. Even with the "it's only getting better from here" card, we aren't there yet, and in some areas, I doubt we'll be there at all. If your frontier models cannot correctly understand the architecture of your project, they cannot suggest meaningful contributions all of the time. LLMs work best with human guidance, and so does open source.

[Khafra @KhafraDev]

@Microsoft has a market cap of $3.14 TRILLION.

[Marco Ippolito @satanacchio]

FFI support has landed in Node.js

[Khafra @KhafraDev]

@wesbos @_____case This is a huge loss to deno!

[fks @FredKSchott]

My favorite part of OSS is getting mad at people when they fork my stuff

[Khafra @KhafraDev]

No one's ever felt threatened by picking node.js
https://t.co/46BYC7JT1L

[dax @thdxr]

this is maybe overly paranoid but opencode is on track to hit 1M MAUs this month

we also use bun and the bun team helps us quite a bit but anthropic owns bun

not sure what happens if they continue to feel threatened

will be thinking hard about this over the next few weeks

[Khafra @KhafraDev]

This API is slow because all it does is compile a path to a regex. You will always be limited by the speed of matching a regex (for each route…)

https://t.co/XJemh1Ula4

[Matteo Collina @matteocollina]

Quick remind to not use URLPattern in @nodejs, it would be painfully slow.

https://t.co/v2zucNrEo9

[Khafra @KhafraDev]

@yagiznizipli I'm pretty sure the bug you're mentioning exists in node's web streams. I believe the fetch tests all relate to webstreams.

[Khafra @KhafraDev]

@_ashleypeacock That sucks

[Khafra @KhafraDev]

so Discord is at that point...

[Khafra @KhafraDev]

@colinhacks this is what happens when no one contributes to OS. I'm surprised so many people wanted this considering the actual change was 12 lines added.

[Khafra @KhafraDev]

Out of all the advancements on the web, being stuck with multipart/form-data has always confused me.

[Khafra @KhafraDev]

I have been using Cloudflare since June 28th 2023. This is the first outage the site has experienced in over 2 years and it only lasted ~3 hours. Discord had an outage a week ago that lasted longer. The site costs <$15 a month. I don't think I can justify complaining. Last 30d: