Excited to share the new CodeFlow course for individuals and teams learning Elixir! Coming from OOP, Elixir can be jarring, make the mental shift faster and love the process! @elixirlang#elixirlang@ThinkingElixir
Launching new CodeFlow course! Covers branching logic, looping, and error handling. See how pattern matching, immutability and functional programming impact the basic structures of how we write Elixir code. @elixirlang#elixirlang https://t.co/13GCyhRwbT
It’s true! After 6 years of weekly episodes, the Thinking Elixir Podcast will be ending on June 23rd. Three episodes left. It’s been an incredible run and I’m grateful for every listener who came along for the journey. #podcast#MyElixirStatus#ElixirLang
Security is front and center with atom exhaustion CVEs and an urgent hackney #security upgrade. Elixir 1.20's type system catching real bugs, a new BEAM-native coding agent called "vibe", and more! #ElixirLang@ElixirLang https://t.co/Xglr7qX8o3
News includes Elixir 1.20.0-rc.6 (last RC?), @TheErlef 2026 election results, LiveStash v0.3.0 for Phoenix LiveView state recovery, a call to fund EEF #security work, and @GitHub got hacked via a VS Code extension, and more! #ElixirLang@ElixirLang https://t.co/DTkrrdnX51
News includes Elixir’s set-theoretic type inference completing all language constructs, #OTP 29.0 released, a wave of CVEs hitting the Phoenix stack, big SWAR string performance gains, and a #LiveView hot-reload tip, and more! #ElixirLang@ElixirLang https://t.co/V3ZVNFfVH7
EEF 2026 election candidates are out, Elixir-Vibe launches tools to fight #AI code #slop, erlang_python 3.0.0 embeds CPython into the BEAM, @ElixirConfEU 2026 videos are dropping, and more! @ElixirLang#ElixirLang#python https://t.co/7alDG7fteC
News includes Mob bringing BEAM-on-device native #mobile dev to Elixir, Folio for print-quality PDFs via Rustler NIF, Oban v2.22 & Pro v1.7.0 released, LiveVue v1.1 with Node-less SSR, and more! #ElixirLang@ElixirLang https://t.co/0rekaO0QHB
News includes Phoenix LiveDebugger hitting v1.0, LiveStash v0.2.0 released, German Velasco’s TestingLiveView(dot)com course is now free, Volt v0.8.0 drops Node.js for frontend builds, and more! #ElixirLang@ElixirLang https://t.co/t5ut1i9xV5
Episode 300! News includes the Localize library v0.15.0, a new program dependence graph tool called Reach, #Tidewave voice input and #PWA support, @TheErlef 2026 elections, plus a special in-depth interview with @JoseValim! #ElixirLang@ElixirLang https://t.co/fFTtDMOoLB
The @TheErlef needs your support for a major security grant, Hex-pm completes its first security audit, @JoseValim drops a massive Tidewave update, and we discuss the ClickFix supply chain attack that hit Axios, and more! #ElixirLang@ElixirLang https://t.co/8ft4zPbItX
News includes a redesigned https://t.co/OiItwA6yPC website, #Hex 2.4 adding #OAuth and #2FA, the official Elixir Expert LSP hitting v0.1, a new LiveStash library for LiveView state recovery, and more! #ElixirLang@ElixirLang https://t.co/39AlgvOsK7
@josevalim The way I successfully use multiple agents at the same time: one is researching a problem in code base A, another is implementing a plan in code base B (like a library), another triaging a PR, a 4th might be developing a plan for one of the projects. I can’t do that all day.
@evanplaice At the same time, changing your SSH server to a non-standard port *significantly* reduces the brute forces attempts. Defense in depth… defense in depth.
Is it just me? Or does it feel like the safest way to protect yourself from JavaScript and Python supply chain attacks is to just not use them? #ElixirLang
@jpcarver Haha! I have great success with Phoenix LiveView and small, targeted JS hooks to libraries when needed and custom JS otherwise. Little to no exposure and a highly reactive, advanced UX that’s easy to use and maintain.
@potibas Part of the problem with JavaScript is there is no rich standard library. You have to bring in all of these dependencies to do basic stuff that is just part of the standard lib in the beam. So things like left pad have a reason to exist.
@potibas Yes, and no. Attackers are going for broadest reach, which is JavaScript and Python. Then there’s the tendency in both communities to use a lot of dependencies. That means exponential transient dependencies for your project. This become much harder ecosystems to protect.