Dennis Morello

💻 Frontend Engineer • Accessibility & UX • Building • Writing about the web at

[Dennis Morello @morellodev]

I love npmx even more 🏳️‍🌈 Happy Pride Month!

[Mario Zechner @badlogicgames]

if we see this, we know

[Dennis Morello @morellodev]

@ibuildthecloud I also wrote a blog post about it, explaining why worktrees are actually useful and how to adopt them without headaches

https://t.co/niAbQrCDED

[Dennis Morello @morellodev]

@ibuildthecloud I feel you, that's why I decided to make working with worktrees simpler and build https://t.co/TsPxhXMyzw

[Visual Studio Code @code]

Add a little fun to your coding sessions 🐶🐱
This extension lets you keep a virtual pet right inside VS Code.

[Dennis Morello @morellodev]

If your site isn't readable by AI agents, you don't exist to them.

I spent some time making my site actually discoverable by ChatGPT, Claude, Perplexity and co. llms.txt, Markdown mirrors, JSON-LD, robots.txt AI signals, and a few Cloudflare-specific tricks.

New post 👇
https://t.co/YjfcJNWksZ

[Tanner Linsley @tannerlinsley]

Finally, @Tan_Stack Start now supports React Server Components!

Start's RSCs are a truly fetchable, cacheable and composable primitive that work with your favorite tools instead of dictating your entire architecture.

Oh, and one more thing... "Composite Components" 😉

🔗⬇️🧵

[Dennis Morello @morellodev]

100% agree

[Igor @igormomentum]

Tanstack is the best thing that happened to React

[Sébastien Chopin @Atinux]

This https://t.co/llGnw9WMcl feature that suggests a faster, more performant alternative is seriously good 🚀

[Tom @tom_zeh]

@TheGoldenDays Defrag Simulator.
https://t.co/nNRU75t8rl

[flavio @flaviocopes]

How Axios was compromised 🤯

[Boris Cherny @bcherny]

Today we're excited to announce NO_FLICKER mode for Claude Code in the terminal

It uses an experimental new renderer that we're excited about. The renderer is early and has tradeoffs, but already we've found that most internal users prefer it over the old renderer. It also supports mouse events (yes, in a terminal).

Try it: CLAUDE_CODE_NO_FLICKER=1 claude

[Dennis Morello @morellodev]

Claude for Mac app feels so slow and sluggish 😫 I know they are improving on the perf side, but there’s still a lot of work to be done.

[Dennis Morello @morellodev]

@MitchKarajohn @feross Well said Dimitris, well said

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Dennis Morello @morellodev]

@NicolaPorro E comunque a Trieste ha vinto il NO.

[Dennis Morello @morellodev]

@NicolaPorro Si dice “Friuli-Venezia Giulia”, non “Friuli”.

[Dennis Morello @morellodev]

@shadcn It really is! I made a tool to easily deal with worktrees, it helped me so much with the boilerplate and I'm sure it will help others as well https://t.co/TsPxhXMyzw

[Dennis Morello @morellodev]

@shaunkruger just supported https://t.co/P9ExVMDpNy on @buymeacoffee! 🎉

You can buy them a coffee here — https://t.co/2iQauqof5i

[Dennis Morello @morellodev]

I just received 2 coffees from @shaunkruger on @buymeacoffee! https://t.co/PycWFPsaj2