PostCSS is one of the most popular front-end tools with 80M downloads/month.
Even if you don’t use it as a preprocessor, you still use it as a dependency in @Autoprefixer, @webpack or Create React App.
Now we are collecting funds to release PostCSS 8.0
https://t.co/fvkP6xKOL9
Popular npm packages Keyv and Cacheable were hijacked, and malicious versions containing a malware were released to steal users’ access tokens.
Protect your packages from the same fate with my guide, based on maintaining PostCSS and 100+ other projects:
https://t.co/reT2FsjAOY
My new article is out!
A systematic guide to releasing npm packages as safely as possible in 2026 (with a Skill to quickly apply the practices to your own open source projects).
Not just “do X”, I cover real attacks and explain how each defense helps.
https://t.co/reT2FsjAOY
The unsung heroes of our time.
@43081j from the https://t.co/N9Y99uXz0R community cut 1 MB from caniuse-lite.
With 700M installs per month, that saves around 700 TB of global internet traffic every month.
https://t.co/8Yo67S3KDu
Here is my post where I share how to create a perfect README.md for your open source project (sharing what I learned creating PostCSS, etc)
https://t.co/RkfVXfmiZN
Huge thanks to @atlas_cloud_ai for supporting our work with $100/month! 😍️
They are building a multimodal AI inference platform that gives developers a single API for video generation, image generation, and LLMs.
https://t.co/u4L8CoOxf7
Introducing the CSS Property Type Validator Stylelint plugin. @schalkneethling released the first beta that validates @property registrations, custom property assignments, and var() usage in your linting workflow. #css#tools
https://t.co/ay733CLKvj
Celebrating my birthday today: 39.
If you’d like to support my work (npm supply chain attack research and trying to fix social media with Slow Reader), I’d be truly grateful for a GitHub Sponsors donation.
https://t.co/kcCWYCHLFq
Oh wow, @amplify just sent me $50 through GitHub Sponsors. Huge thanks!
Now I can get that screwdriver for the house that’s been sitting on my wishlist.
https://t.co/kcCWYCHLFq
Supply chain attacks can’t be solved with one silver bullet. They need a systemic approach.
For every dev layer (not just npm, but CI, Docker, and your editor) ask 4 questions:
1. How can we reduce dependencies?
2. Isolation
3. Update control
4. Review
Thread ↓
Hey! I am open for contract or full-time work as a full-stack developer.
I've worked on industrial software, real estate tech, and a visual website builder. I specialize in design systems, a11y, and UX.
Previously maintained PostCSS, Rollup, and SVGO.
CSSkit, a high-performance CSS toolchain written in Rust. Keith Cirkel’s project combines parsing, minification, linting, formatting, and LSP integration into one zero-config tool inspired by oxc. #css#tools
https://t.co/RpNgpKePqR
Tholmad is a unique writing system for the constructed language Vorgath.
The script is inspired by the seals of demons from the real medieval grimoire Ars Goetia (PostCSS version logos are based on these seals).
https://t.co/mtgRnWrBWu
PostCSS creator, @sitnikcode, shares how to make your open source popular.
He also destroys the false idea that writing open source will make you famous, or that you should write open source to show your expertise. Plus, he explains how to avoid burnout when maintaining your products.
https://t.co/fY56manqaH
Calling all frontend engineers. It's your time to become a Martian!
We’re looking for a JS developer who respects CSS, UX, and design, and can work independently in a fully remote team.
This is a great opportunity to join the team behind OSS tools like @PostCSS, Nano Stores, and OKLCH. You’ll also help solve exciting problems for devtool startups like https://t.co/2LpZ8xuApt, Teleport, and many more.
English fluency is required.
Sound like you? Apply here: https://t.co/xE8uh7HubB
#5. @sitnikcode is the creator of @postcss, and he shared how others can also make popular open source tools.
Find the answers here: https://t.co/MLnstTqLcN