Danny Thuering

🏢 CTO @webmobix
🧑🏻‍💻 software #developer
👨‍💼 #entrepreneur
📍 Jakarta 🇮🇩
📈 building @VanillaRoundApp

[Danny Thuering @dannytt]

@MForgeng Mein HOCHtarif in in Züri ist nur 29.88 Rappen im teuren pronatur Tarif. Das entspricht ca. 0,32 €

[Danny Thuering @dannytt]

@xt0n1t3ch @MiniMax_AI @opencode How is it? Just run m2.7 before reading this post 😂

[Danny Thuering @dannytt]

Happy Vesak Day 🙏

[Danny Thuering @dannytt]

@athasdev No issues with IntelliJ here

[Danny Thuering @dannytt]

I started using Deno for a new project and now I am curious.
Are you guys deploying Deno apps compiled or just run them with the serve command?

#deno #buildinpublic #software #dev #ops

[Danny Thuering @dannytt]

@marvinkennis Thats amazing! How does editing look like? 👏

[Danny Thuering @dannytt]

I saw this posted on BSky and it is a great summary about comments in code and how they can serve as long term memory for agents.

What’s your take on keeping the noise low?

#software #dev #code #agent #ai #buildinpublic

https://t.co/7RzkO1r2Cz

[Danny Thuering @dannytt]

This looks like a fantastic open source project 👍

Well done 👏

[Fayaz Ahmed @fayazara]

Introducing Screendrop - a screenshot tool for everyone

Opensource
Host your own cloud with R2 + a tiny little hono worker
Native
Screenshot capture and editor
Video recorder, editor and compressor

This is one of the best apps I've built.

[Danny Thuering @dannytt]

@eastdakota @UBS Oh I am curious and messaged you. You are talking about the US entity?

[Danny Thuering @dannytt]

@OpenRouter How will you use that money?

[Danny Thuering @dannytt]

@AlphaSignalAI I do have really good experience working with #openspec. 👨🏻‍💻

Much better structured and scoped requirements. Better outcomes. 👏

[Danny Thuering @dannytt]

So good to see. Just implemented it yesterday and it made my long tables snappy again. 🙏

[TANSTACK @tan_stack]

TanStack Virtual just got a lot faster and packs a bigger punch on iOS!

🦥 lazy items + 📸 snapshots
🧪 cross-lib benchmarks
⚡ 1382× faster resize storms
📱 iOS scroll, fixed
↩️ backward jank, gone
🎯 pixel-perfect scrollToIndex

🔗⬇️🧵

[Danny Thuering @dannytt]

How can I in @opencode turn off certain provider? Like I dont use Cloudflare AI and dont want to scroll through a long models list.

#ai #agent #opencode #model

[Danny Thuering @dannytt]

Upgraded to pnpm 11 in April mostly for monorepo ergonomics.

Turns out 3 default settings quietly protected me from the TanStack supply chain attack that hit today:

• minimumReleaseAge — 24h quarantine on new packages
• blockExoticSubdeps — blocks git-based dependency injection
• allowBuilds — lifecycle scripts off unless you opt in

Right defaults > right intentions 🔒

https://t.co/BJ4noTMRVl

#nodejs #pnpm #supplychain #security #javascript

[Danny Thuering @dannytt]

Worth to read and to apply in your own #GitHub workflows. 👍

[TANSTACK @tan_stack]

"Hardening TanStack After the npm Compromise", a followup to yesterday's post-mortem.

https://t.co/KDZQCrgfOe

[Danny Thuering @dannytt]

@jamesqquick Indeed, better than user-select: none.

[Danny Thuering @dannytt]

You don't need to merge a PR to poison a CI cache.
Just open one.
pull_request_target runs in your main repo context — meaning a random contributor's PR can write to your shared build cache before anyone reviews a single line.
Here's how it works and how to fix it

https://t.co/GhglPmepfp

#GitHub #GitHubActions #DevSecOps #SupplyChainSecurity #CI #TanStack #DevOps #InfoSec

[Seb ⚛️ ThisWeekInReact.com @sebastienlorber]

TL;DR for open-source maintainers

🚫 NEVER use "pull_request_target" workflows

🚫 NEVER use shared caches in your publish pipeline

Combining these 2 in particular is extremely dangerous

I've repeated this countless times over the years, but another reminder is always useful

[Danny Thuering @dannytt]

@JinjingLiang Which is already the default when you use pnpm 11.

[Danny Thuering @dannytt]

@BenjDicken A bit late to the party though 👨🏻‍💻