Note for
numberphiles:
all numbers have been rounded to their first significant
digit, because I’m a fan of Rob Eastaway’s
“zequals” method
of getting to the point when it comes to estimation. It’s much
more valuable to walk away with the heuristic “some…

Over 400 compromised npm package versions and at least 2 PyPI packages published in a coordinated supply chain attack targeting TanStack, Mistral AI, UiPath,…

Posted by jespergran - 201 votes and 19 comments

Why senior developers talk in terms of complexity while the rest of the business is worried about uncertainty. And what to do about it now that AI is in the picture.

After 5 years and $5M building Wasp, we're replacing our custom config language with TypeScript. Here's why we thought a new language was a good idea, what we learned, and why TypeScript won.

Explore this post and more from the programming community

Blog post with details coming soon.
It passes Bun's pre-existing test suite on all platforms (and fixes several memory leaks and flaky tests), the binary size shrinks by 3 MB - 8 MB, the be...

Safari and Firefox change how big sites render based on the domain. TikTok, Netflix, Instagram… even SeatGuru. Chrome doesn’t. Why is that?

mimalloc is an open-source, modern, scalable memory allocator that is a drop-in replacement for malloc and free. It is relatively small (~12K lines), with clear internal data structures, and is easy to build and integrate into other projects. It provides…

SAN FRANCISCO, CA - In the wake of a devastating supply chain attack in the npm registry that left millions of enterprise applications compromised and billions of user records exposed, developers across the JavaScript ecosystem expressed deep sorrow today…

...This whole week has been fascinating!

Everything started with [Anthropic acquiring Bun.sh](https://www.anthropic.com/news/anthropic-acquires-bun-as-claude-code-reaches-usd1b-milestone).

Some within [the bun community raised some concerns](https://wwj.dev/posts/i…

Apple spent five years building hardware and software to make memory corruption exploits dramatically harder. Our engineers, working together with Mythos Preview, built a working exploit in five days.

Hello! 8 years ago, I wrote excitedly about discovering Tailwind.

Are you a C or C++ programmer?

Why building a rich, selectable, streaming Markdown chat UI on macOS still pushes you toward WebKit or Electron.

My thought on increased amount of packages published to PyPi.

From lazy imports to a stronger JIT compiler

Nokia, TSB, Boeing, Microsoft — four companies, four disasters, one pattern. The engineers knew. They just didn't speak up. Here's why, and what it costs when nobody pushes back.