Swaroop Sethumadhavan

Front-end dev Previously: @Shopify @Auto1_Group, @TeamZefo -- a.k.a STRIKER, Indian, JavaScript. Building: @forge_icons

[Swaroop Sethumadhavan @smswaroop]

Beautiful #icons just landed in. Give it a try and use it for free in any of your projects. #freeicon #svg #freedownload #illustration #uiux

[saideep @sd_saideep]

📣 Introducing my side project Forge Icons. Its a collection of beautiful #svg #icons with customisable stroke so that they can fit and matches your brand.

Give it a try and use wherever you want it for #free 🥳 #ecommerce #Iconpack
https://t.co/eflnKCHLi8

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[mahir @slobkebap]

folks, I'm organizing the next Claude Code (v2) meetup in Berlin next week wednesday, come by and crank away

https://t.co/ZY7t1KUNfl

[Hayden @haydenbleasel]

I've had a lot of people ask me how to build components properly. How do you think about things like composition, polymorphism, slots, data attributes and accessibility? It's a lot to figure out.

📦 That's why @shadcn and I have teamed up to create components․build — the open-source standard for building modern, composable and accessible UI components by @vercel

Link 👇

[TypeScript @typescript]

Today we're thrilled to announce our effort to port the TypeScript compiler and language service to native code, gaining a 10x speed boost in build times and editor responsiveness!

https://t.co/zxTchNDMwD

[Addy Osmani @addyosmani]

Tip: Chrome DevTools can override the content of Fetch/XHR requests! Useful for mocking APIs without waiting on backend changes.

[ViteConf @ViteConf]

Registrations for ViteConf 2024 are open! 🎉
Get your free ticket and invite others in your communities! This October 3rd & 4th, the Vite Ecosystem gathers for another 24-hour marathon!
Let's keep building together. Lightning fast ⚡️
https://t.co/4yGEaJuexV

[shadcn @shadcn]

Introducing Charts.

A collection of chart components that you can copy and paste into your apps.

Built on top of Recharts. Beautifully designed. Open Source.

[React @reactjs]

We just published the first beta for React 19! This beta release is for collecting feedback and preparing libraries for the next major version of React.

To see what's included, check out the release post:

https://t.co/dnGcbIRH6O

[Wes Bos @wesbos]

Damn! How did I not know about this VS Code feature earlier?

[Jecelyn Yeen 🐟 @jecfish]

😍Love this! No more jumping into node_modules (frameworks / library code) during breakpoint debugging. https://t.co/GOrIgl4zYh

#webdevelopment #debugging #javascript

[Peter Yang @petergyang]

Airbnb has a blueprint of their entire customer journey on their office walls.

They then map all product, policy, and service updates to it.

More companies should do this to avoid shipping the org chart.

[Wes Bos @wesbos]

auto-growing <textarea> without JavaScript!

CSS is getting field-sizing: content; to size inputs by their contents.

Dropped in Chrome Canary today, demo here:

[Cassidy @cassidoo]

I use this all the time and realized it's not common knowledge: you can add a .png to the end of the link to your GitHub profile and it'll give you your profile picture!

https://t.co/EMZF7nV6DD

[Addy Osmani @addyosmani]

Lazy-loading iframes and images is now supported in all modern browsers! Try <iframe loading=lazy> and <img loading=lazy> for faster initial page loads ⚡️

[Wes Bos @wesbos]

Node.js finally has support for loading .env files! You'll no longer need the dotenv package

Dropped in 20.6.0

Also supports passing runtime flags like --inspect and --watch

[Wes Bos @wesbos]

CSS Nesting just landed in Firefox 117 which puts it at 100% browser support!

You can start using it today — here are 11 examples on how it works 👇

[Daniel Rios Pavia @lordofthecactus]

If anybody is looking for a lead/senior software engineer, I’m available. I used to work at @ShopifyEng in Hydrogen open source. I’m looking for interesting projects and problems ❤️🚀

[Wes Bos @wesbos]

CSS is getting margin-trim!

Remove margins from children that touch the sides of a parent. No more selecting :last-child

[Delba @delba_oliveira]

Light reflection. But make it UI.

Here's an idea for your loading skeletons. Let's create a shimmer animation with @tailwindcss ✨