우산

졸려요.. / Web / Software Engineering / 소프트웨어 개발 업계와 노동 문제 / Views are my own

[Jihyeon Kim (김지현) @simnalamburt]

> the latest Shai Hulud malware wave contains an LLM prompt to create biological weapons and nuclear weapons, with the purpose to trip LLM safety refusals so that LLM-based code scanning wont see the malware

https://t.co/8G5TZ3K11g

WHAT

[Daiki Matsudate @d_date]

#wwdc26

[Daishi Kato @dai_shi]

jotai-rolldown just dropped.

https://t.co/YkoRlIhkKC

Feedback is very welcome.

[Firefox for Web Developers @FirefoxWebDevs]

We're experimenting with a way to visualize session history in Firefox DevTools, and we'd love your feedback!

Here's the background, and how to try it: https://t.co/wf2REncijf

[Jake Archibald @jaffathecake]

The name of these diagrams gives me equal parts pride and embarrassment.

[Zoltan Kochan @zkochan]

The Rust rewrite of pnpm was moved to the pnpm repository today. Now we will make changes to the TS and Rust versions in parallel.

[Marc Brooker @MarcJBrooker]

So we're talking about S3 vs NVMe?

Let me talk a little about Aurora and Aurora DSQL, and how we think about the trade-offs for each of those.

I'll start with DSQL.

In DSQL, S3 is the authoritative, stable, store of 'older' data.

[Seb ⚛️ ThisWeekInReact.com @sebastienlorber]

Let's also remind that after v26, Node is dropping even/odd releases

Starting with v27, all versions will go from
alpha ➡️ current ➡️ LTS ➡️ end-of-life

[pnpm @pnpmjs]

pnpm v11.0.0 is released!

The "latest" dist-tag still points to v10, so install it via "pnpm self-update latest-11"

https://t.co/t60Pxl2IwF

[TypeScript @typescript]

TypeScript 7.0 Beta is here!

Built on a new native and parallelized foundation, it's already being used on multi-million line codebases.

Read up more here and try it on your projects today!

https://t.co/mYN3MPp1ab

[React Router @ReactRouter]

React Router v7.14.0 is now available

- Vite 8 support
- Additional RSC Framework Mode features: SPA mode, pre-rendering, link prefetching, additional module exports
- Several bug fixes

[도막도 @NvironmentE]

옆 팀에서 Compositor와 JavaScript runtime의 thread가 분리되어있어서 생기는 재밌는 이슈 이야기를 들려줬다. Agent가 어쩌구 하는 이야기보다 오백 배 재밌었다. 내가 좋아했던 엔지니어링은 이런 거였는데..

[TypeScript @typescript]

TypeScript 6.0 is now available!

This release brings better type-checking for methods, new standard library features, new module features for Node.js, and more!

But most important, this release brings us one step closer to the upcoming native-speed 7.0!

https://t.co/hon0RU1L5B

[Marcelo Trylesinski @marcelotryle]

Starlette 1.0 is here!🎉

After nearly eight years, Starlette has reached its first stable release. Downloaded almost 10 million times a day, it serves as the foundation for FastAPI and the Python MCP SDK.

Blog post: https://t.co/KdSmoBJnah
Release notes: https://t.co/m8Si0XDexJ

[Jang-Ho Hwang @xrath]

��늘 밟은 버그. pdfkit (npm)으로 만든 문서를 크롬에서 열었는데 한국어 본문이 Cmd-F로 검색이 안 됐다.

PDF 내부에 ToUnicode CMap이 있는데 글리프-유니코드 매핑 범위가 몇 개인지 선언하는 거다. 그런데 이걸 1로 하드코딩 해놨다(!!). 글리프가 256개 이하면 실제로 1이라 문제 없지만, CJK 처럼 글리프가 많아지면 범위가 여러 개로 쪼개지고, 크롬 PDF 뷰어는 선언된 개수만큼만 읽기 때문에 첫 번째 범위 이후는 전부 무시.

결과적으로 제목은 검색이 되는데 본문은 검색이 안 되는 괴상한 상황이 된다. 이거 2014년부터 11년 5개월간 있던 버그고 3달전 pdfkit 최신 버전인 0.18.0에서야 고쳐짐. 수정은 딱 한 줄.

- 1 beginbfrange
+ ${ranges.length} beginbfrange

[Basix @Basix1120]

요즘 개발자 만나도 새로 나온 모델, 바이브코딩 하는 법, 내 직업의 미래, 산업 변화, 요즘 취업 어렵더라 이 5개에서 주제가 1mm도 안벗어나서 사실 코딩 얘기할 힘이 별로 없음 차라리 리액트 프레임워크 가지고 vs놀이하는게 더 재밌었지

[우산 @dev_usan]

@Harunene 요즘은 혹시 Swig 잘 안 쓰나영

[Steven ⬢ @styfle]

You can use AbortSignal.any() to combine multiple abort signals.

For example, you might want a user-defined abort signal but you don't want to allow any longer than 5 seconds.

https://t.co/tdZMZfmX0y

[Matteo Collina @matteocollina]

.@nodejs has always been about I/O. Streams, buffers, sockets, files. But there's a gap that has bugged me for years: you can't virtualize the filesystem.

You can't import a module that only exists in memory. You can't bundle assets into a Single Executable without patching half the standard library.

That changes now 👇