Jack Hsu 🦋 @jaysoo.ca

🇨🇦 🇹🇼 • @NxDevTools core team member •

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

👀

[Jeff Cross @jeffbcross]

Join us June 23rd for AI 💛 Monorepos Conf!

[Jeff Cross @jeffbcross]

Today we officially deprecated 4 packages that facilitated remote caching with Nx and different cloud providers: nx/s3-cache, nx/gcs-cache, nx/azure-cache
and nx/shared-fs-cache. This is a proactive move to discourage a known attack vector in recent supply chain attacks: cache poisoning.

This isn't related to Nx Cloud's remote caching which has built-in protection against poisoning. These plugins were used by teams who couldn't use Nx Cloud but wanted the speed benefits of distributed task caching.

We published a CVE (CREEP CVE-2025-36852) last year against these packages to make it clear that they shouldn't be used for serious projects because of the inherent design flaw. But we still see the plugins used in irresponsible ways.

Cyber attacks are ramping up, and are only going to get more effective as the tools the attackers use become more powerful. We're no longer compromising by providing tools that we know most users are using irresponsibly.

The notice linked in the next tweet gives more details and recommendations.

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

Static code analysis and AI check on the published VSCode extension would be great. We publish to other marketplaces like Chocolatey, and they have code scanning prior to making new versions public.

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

It feels awful to be part of a supply-chain attack. At this point, we have to assume your machine can be compromised at any point because the supply chain has so many holes in it. It's easy to miss something because the defaults are insecure.

Never leave anything on disk. Use vaults. Don't use `gh` -- unless `gh auth token` is removed from the CLI.

[Nx @NxDevTools]

We've published the full, detailed postmortem of the Nx Console compromise from Monday May 18th: https://t.co/zIOvHn6J1M

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

Nx is 7x more memory efficient now.

Yet, another feature we added to the Nx platform that really helped us track down how to improve Nx itself.

- https://t.co/WTa5tZ06uc
- https://t.co/vdWpQT0064

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

Task sandboxing has been useful for us internally to find cache misconfiguration. This can result in both false-positive and false-negative cache hits/misses. We've been patching our plugins so Nx users get the right config OOTB.

Looking forward to making this feature more widely available in the future.

[Nx @NxDevTools]

Nx v22.7 is out!! 🚨

📦 Task Sandboxing
📐 more fine-grained cache control
⚡ 7x more memory efficient & 90% faster
🤖 Agentic Nx Import
..and a lot more

Check out @juristr's blog post & video below

[Nx @NxDevTools]

Self-Healing CI is all about helping you waste less time debugging broken PRs. So the more we can trust to auto-apply, the better.

That’s why we now analyze tasks and suggest the ones that can confidently be auto-applied.

Read more in our blog post below.

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

We did the same on the https://t.co/3wAThUrL3q website. Thanks for the heads up @juristr !

https://t.co/zZWcQqIu5u

[Juri Strumpflohner @juristr]

Moved my personal website/blog to @Cloudflare + made it Agent-Native
(while prepping lunch for kids...)

These things are so easy nowadays...

(also wrote a quick article about how I deploy to Cloudflare from a monorepo because these questions keep coming up; link below)

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

We gotchu

https://t.co/DqsyMeZg0I

[Bun @bunjavascript]

but what about bun??

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

@juristr Nx cache size defaults to 10% of disk, but you can change it to whatever suits you.

https://t.co/fkKtJpTt5O

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

As an aside, I exclusively use Claude and Claude Code to learn or setup new tools.

Like switching from Ghostty to Kitty, I had Claude inspect my Ghostty, neovim, and tmux setup and try to keep the key bindings similar so I don't have to retrain my brain too much.

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

The new tutorial series also serves as a great way to use AI agents to learn Nx. You can copy the prompt into Claude Code or a similar tool, and it'll guide you through the content using the actual repo!

https://t.co/DqsyMeZg0I

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

We reworked the Nx docs so the "getting started" experience is more streamlined and caters only to things everyone should learn.

Nx is simpler than ever, and if you haven't tried it in a while I highly recommend taking a look again.

Check it out! https://t.co/szLtgEtVqR

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

I've been running CI monitor in Claude Code for two weeks, and it 100% of the time got my PR to green without my intervention.

The only bottleneck now is getting human reviews once the PR is green. But I no longer need to use up mental capacity to babysit PRs.

[Juri Strumpflohner @juristr]

Channeling my inner @aarondfrancis by experimenting with some React motion + synching music.

(not there yet, but we're getting there 😏)

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

Also ICYMI, we updated our information architecture for https://t.co/O96aUKuVuN.

We've grouped topics to general vs specific content, like general CI features vs specific Playwright features. It should be easier to navigate and find things.

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

We're working on a lot of cool things in 2026.

I'm very excited about bring the benefits of Nx to synthetic monorepos. Definitely a lot of value to unlock here.

Also, looking forward to less manual work to get that last mile to merged PRs using AI agents.

[Nx @NxDevTools]

In 2026, Nx becomes essential for autonomous AI agent performance.

🤖 Local-to-CI Integration: bridge the boundary between your local agent and CI
🌐 Synthetic Monorepos: monorepo benefits for people with a polyrepo setup
🔍 Task Sandboxing: automatically detect misconfiguration
👀 ...and more!

[Nx @NxDevTools]

A little gift before we head out for the holidays: Nx 22.3 is live 🎁

🎉 Full @angular 21 support: zoneless, esbuild, and Vitest out of the box
🚀 Experimental tsgo compiler: test the future of @typescript
📝 @PrettierCode v3 compatibility

Enjoy your holiday hacking!

[Nx @NxDevTools]

We gave Claude Code the same feature request twice.

⏳ Polyrepo: 2 hours
🚀 Nx monorepo: 30 minutes

Same app. Different setups. Wildly different results.

Here's why your repo structure matters more than you think 🧵
(🔉 sound on 👇)

[Nx @NxDevTools]

Tired of guessing why your CI is running out of memory? 🤔

Nx's new Agent Resource Usage view shows you exactly which tasks are consuming resources.

No more blind guessing. Just data-driven decisions. 📊

[Jack Hsu 🦋 @jaysoo.ca @jay_soo]

Oh damn, Jason and myself will be overtaken by robots soon.

[Victor Savkin @victorsavkin]

1/2 Nx's Self-Healing CI Agent accounts for 15% of commits on the Nx repo.

That makes it our third most productive team member. Claude Code comes in at #7.

@NxDevTools