defyus

I'm a SWE focusing on bringing new and exciting apps to market providing easy to use interfaces, while paving the way with industry leading tech.

[defyus @defyus]

Mosaic 0.1.3

• Drag panes by their header to rearrange your workspace layout
• Ctrl-C (and friends) now work right in shell panes.
• Spam Ctrl-C to kill stubborn processes; shell panes won't close on you
• Rail counts skip archived sessions

https://t.co/fkafXghuVo

[defyus @defyus]

@ThePrimeagen Dungeon Crawler Carl

[defyus @defyus]

@ThePrimeagen

[defyus @defyus]

@ryanvogel -_-

[defyus @defyus]

@opencode Bruh...

[defyus @defyus]

@thdxr

[defyus @defyus]

@Jonathan_Blow @ThePrimeagen This was the worst.

[defyus @defyus]

@codegirl007 Young macgyver's, if there's a will there's a way.

[defyus @defyus]

@trashh_dev

[defyus @defyus]

@ThePrimeagen shadowing who?

[defyus @defyus]

@ThePrimeagen got to love ryan lol. classic

[defyus @defyus]

@WarrenInTheBuff

[defyus @defyus]

@theo Not I, I built Mosaic its built in.

[defyus @defyus]

@dan_le_brown @DenLoginoff @thdxr npm allows maintainers to set loose version ranges go defaults to the minimal version i believe. but don't quote me on that lol.

[defyus @defyus]

@dan_le_brown @DenLoginoff @thdxr go is still susceptible to supply chain attacks, it's just a bit more difficult. go pins package and dependencies along with checksum hardening but not eliminating the threat.

[defyus @defyus]

non satire answer. honestly, it won't. everyone depends and trusts packages to much in light of convenience.

the whole paradigm doesn't work. package -> dep package -> dep package -> dep package.

we rely on the "trust me bro" code to heavily for our own good.

real answer, either write the code yourself, or build sandboxed package audit(agent) tool to analyze for malicious activity but that could still won't be 100%. and for the love of god pin your versions lol.

[defyus @defyus]

@buttface_9000 @davidcroda @thdxr except for the last part ;)

[defyus @defyus]

@buttface_9000 @davidcroda @thdxr its def satire. lol

[defyus @defyus]

Every developer on Earth has to privately vote:

Blue: Run pip/npm install.
Red: Write the functionality yourself.

If more than 50% of developers choose Blue, the entire ecosystem stays safe and productive. Everyone benefits. If fewer than 50% choose Blue, the ecosystem collapses (supply chain attacks, abandoned packages, broken dependencies, etc.) But only developers who chose Red survive unaffected.

[defyus @defyus]

@DenLoginoff @thdxr