Ben McCann
@benmccann.com
Investor and entrepreneur. SvelteKit maintainer.
Co-founded Connectifier - acquired by LinkedIn
Co-founded Connectifier - acquired by LinkedIn
Reposted by Ben McCann
Happy to report that the Chatto development instance is now available for testing. Go nuts (but not too nuts, k?)
Chatto Dev Instance
The development instance of Chatto, the lean, self-hostable chat app. Come try the latest builds and hang with the team.
dev.chatto.run
January 29, 2026 at 3:18 PM
Happy to report that the Chatto development instance is now available for testing. Go nuts (but not too nuts, k?)
Reposted by Ben McCann
No biggie - just 1-step better-auth setup for Svelte 🔥.
Kudos @jyc.dev. I was really really hoping for this to become reality one day!
github.com/sveltejs/cli...
Kudos @jyc.dev. I was really really hoping for this to become reality one day!
github.com/sveltejs/cli...
Release sv@0.12.0 · sveltejs/cli
Minor Changes
remove: lucia from official addons in favor of better-auth (#898)
Patch Changes
feat(add): better-auth is now an official addon (#898)
fix(cli): unified package manager detectio...
github.com
February 6, 2026 at 3:18 PM
No biggie - just 1-step better-auth setup for Svelte 🔥.
Kudos @jyc.dev. I was really really hoping for this to become reality one day!
github.com/sveltejs/cli...
Kudos @jyc.dev. I was really really hoping for this to become reality one day!
github.com/sveltejs/cli...
Reposted by Ben McCann
It's official, you can now get paid up to $10,000 for finding security issues in Svelte and SvelteKit! Big thanks to both the security team at Vercel and the Svelte maintainers' group for coming together to make this possible. Learn more: vercel.com/blog/the-ver...
The Vercel OSS Bug Bounty program is now available - Vercel
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vercel.com
February 4, 2026 at 5:19 PM
It's official, you can now get paid up to $10,000 for finding security issues in Svelte and SvelteKit! Big thanks to both the security team at Vercel and the Svelte maintainers' group for coming together to make this possible. Learn more: vercel.com/blog/the-ver...
Reposted by Ben McCann
It took a while, lots of debugging and fixes in rolldown, vite-plugin-svelte and sveltekit, but today it happened. For the first time, sveltekit tests in vite-ecosystem-ci for vite-8 beta passed.
github.com/vitejs/vite-...
Thanks to everyone who helped getting there especially @sapphi.red
github.com/vitejs/vite-...
Thanks to everyone who helped getting there especially @sapphi.red
January 29, 2026 at 2:55 PM
It took a while, lots of debugging and fixes in rolldown, vite-plugin-svelte and sveltekit, but today it happened. For the first time, sveltekit tests in vite-ecosystem-ci for vite-8 beta passed.
github.com/vitejs/vite-...
Thanks to everyone who helped getting there especially @sapphi.red
github.com/vitejs/vite-...
Thanks to everyone who helped getting there especially @sapphi.red
Reposted by Ben McCann
✂️ Knip v5.82.0 is out
→ Improved support for @svelte.dev + new SvelteKit plugin
→ In the Editor Extension, quickfix can directly install missing dependency (thanks @alexanderkaran.bsky.social)
Enjoy your Sunday 🫖 ☀️
→ Improved support for @svelte.dev + new SvelteKit plugin
→ In the Editor Extension, quickfix can directly install missing dependency (thanks @alexanderkaran.bsky.social)
Enjoy your Sunday 🫖 ☀️
January 18, 2026 at 9:55 AM
✂️ Knip v5.82.0 is out
→ Improved support for @svelte.dev + new SvelteKit plugin
→ In the Editor Extension, quickfix can directly install missing dependency (thanks @alexanderkaran.bsky.social)
Enjoy your Sunday 🫖 ☀️
→ Improved support for @svelte.dev + new SvelteKit plugin
→ In the Editor Extension, quickfix can directly install missing dependency (thanks @alexanderkaran.bsky.social)
Enjoy your Sunday 🫖 ☀️
Reposted by Ben McCann
Every time you update your dependencies and see that your deps tree gets slimmer, there is a high chance you're enjoying the relentless work of James or other folks from the @e18e.dev community that he inspired to get into action. Consider sponsoring him if you care about the JavaScript ecosystem.
just a reminder that i have github sponsors if you'd like to sponsor the OSS work i do.
i maintain quite a few projects, and contribute to many more. nobody other than these sponsors pay for that. so these help a huge amount, however small 🙏
thanks so much to those who already did ❤️
i maintain quite a few projects, and contribute to many more. nobody other than these sponsors pay for that. so these help a huge amount, however small 🙏
thanks so much to those who already did ❤️
Sponsor @43081j on GitHub Sponsors
Maintainer of chai, parse5, unjs, vueuse, tinylibs, & more. One of the e18e.dev leads. Core contributor to lit and modernweb.
github.com
January 12, 2026 at 5:41 AM
Every time you update your dependencies and see that your deps tree gets slimmer, there is a high chance you're enjoying the relentless work of James or other folks from the @e18e.dev community that he inspired to get into action. Consider sponsoring him if you care about the JavaScript ecosystem.
Reposted by Ben McCann
the most recent data shows Waymo's self-driving cars perform significantly *better* than human drivers.
the most recent data shows Tesla Robotaxis perform significantly *worse* than human drivers, even with a safety monitor in the front seat. sherwood.news/tech/teslas-...
the most recent data shows Tesla Robotaxis perform significantly *worse* than human drivers, even with a safety monitor in the front seat. sherwood.news/tech/teslas-...
Tesla’s 29 Austin Robotaxis have crashed 8 times since June, as data suggests they perform much worse than human drivers
That’s a lot of crashes for such a small fleet....
sherwood.news
December 16, 2025 at 1:51 PM
the most recent data shows Waymo's self-driving cars perform significantly *better* than human drivers.
the most recent data shows Tesla Robotaxis perform significantly *worse* than human drivers, even with a safety monitor in the front seat. sherwood.news/tech/teslas-...
the most recent data shows Tesla Robotaxis perform significantly *worse* than human drivers, even with a safety monitor in the front seat. sherwood.news/tech/teslas-...
Reposted by Ben McCann
Guys I'm not making this up...I asked Claude, ChatGPT, Gemini and Grok what frontend framework they would pick if they only could pick the one they would enjoy writing more.
They ALL said Svelte 🧡
Do your LLM a favor, switch to Svelte 🧡
They ALL said Svelte 🧡
Do your LLM a favor, switch to Svelte 🧡
December 2, 2025 at 11:45 AM
Guys I'm not making this up...I asked Claude, ChatGPT, Gemini and Grok what frontend framework they would pick if they only could pick the one they would enjoy writing more.
They ALL said Svelte 🧡
Do your LLM a favor, switch to Svelte 🧡
They ALL said Svelte 🧡
Do your LLM a favor, switch to Svelte 🧡
Thankful to the amazing unsung heroes of open source development doing great work like @cyberalien.dev
Check out how much smaller `@iconify/tailwind4` has gotten with the latest release!
Check out how much smaller `@iconify/tailwind4` has gotten with the latest release!
November 28, 2025 at 1:21 AM
Thankful to the amazing unsung heroes of open source development doing great work like @cyberalien.dev
Check out how much smaller `@iconify/tailwind4` has gotten with the latest release!
Check out how much smaller `@iconify/tailwind4` has gotten with the latest release!
Excited to see the Svelte custom rendering work get a sponsor! Additional sponsors are still required to fund the project, which will let Svelte run with Lynx JS
Thanks to SuppCo for supporting our Svelte Custom Renderers initiative 🙌
When ready, this API will allow devs to use Svelte to build Native Apps, Terminal, or anything they want. If your company wants to help make custom renderers a reality, make sure to reach out!
svelte-custom-renderers.com
When ready, this API will allow devs to use Svelte to build Native Apps, Terminal, or anything they want. If your company wants to help make custom renderers a reality, make sure to reach out!
svelte-custom-renderers.com
Custom Renderers for Svelte, a Mainmatter Initiative
Help us enable cross-platform UI development with Svelte for endless possibilities.
svelte-custom-renderers.com
November 26, 2025 at 3:03 PM
Excited to see the Svelte custom rendering work get a sponsor! Additional sponsors are still required to fund the project, which will let Svelte run with Lynx JS
Reposted by Ben McCann
A historic first today as Opus 4.5 scores 100% on SvelteBench - the first model to do so. We're hard at work on the next version of SvelteBench that will use an agentic approach, if you have feedback, submit it here: github.com/khromov/svel... #svelte #ai
November 25, 2025 at 9:45 AM
A historic first today as Opus 4.5 scores 100% on SvelteBench - the first model to do so. We're hard at work on the next version of SvelteBench that will use an agentic approach, if you have feedback, submit it here: github.com/khromov/svel... #svelte #ai
I wonder why none of the literally HUNDREDS of individuals with access to publish the Zapier SDK noticed their organization was committing engineering malpractice by giving that many people access to the keys of the kingdom.
And that's how you catch SHA1-Hulud...
www.npmjs.com/package/@zap...
And that's how you catch SHA1-Hulud...
www.npmjs.com/package/@zap...
Shai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS Domains
The threat actor behind “Shai Hulud 2.0” launched a new malware campaign compromising the supply chain of Zapier, ENS Domains and more — exposing secrets, injecting malicious code, and enabling widesp...
www.aikido.dev
November 24, 2025 at 5:16 PM
I wonder why none of the literally HUNDREDS of individuals with access to publish the Zapier SDK noticed their organization was committing engineering malpractice by giving that many people access to the keys of the kingdom.
And that's how you catch SHA1-Hulud...
www.npmjs.com/package/@zap...
And that's how you catch SHA1-Hulud...
www.npmjs.com/package/@zap...
With the next release of typescript-eslint, you will be able to setup a new SvelteKit project with every single integration it offers and fast-glob will be nowhere in your dependency tree! Removes over a dozen dependencies like is-number!!
github.com/typescript-e...
github.com/typescript-e...
feat(typescript-estree): replace fast-glob with tinyglobby by benmccann · Pull Request #11740 · typescript-eslint/typescript-eslint
PR Checklist
Addresses an existing open issue: fixes Enhancement: replace fast-glob with tinyglobby #10533
That issue was marked as accepting prs
Steps in Contributing were taken
Overview
Repl...
github.com
November 24, 2025 at 5:01 PM
With the next release of typescript-eslint, you will be able to setup a new SvelteKit project with every single integration it offers and fast-glob will be nowhere in your dependency tree! Removes over a dozen dependencies like is-number!!
github.com/typescript-e...
github.com/typescript-e...
Reposted by Ben McCann
LLMs have finally stopped recommending React. Nature is healing 🧡
November 19, 2025 at 6:59 PM
LLMs have finally stopped recommending React. Nature is healing 🧡
The glob library on npm currently has a CVE. It's entirely predictable since it has 26 dependencies.
If you're getting a security warning from glob it's a good time to see if you can switch to a lighter dependency such as tinyglobby or Node's built-in glob functionality: nodejs.org/api/fs.html#...
If you're getting a security warning from glob it's a good time to see if you can switch to a lighter dependency such as tinyglobby or Node's built-in glob functionality: nodejs.org/api/fs.html#...
File system | Node.js v25.2.1 Documentation
nodejs.org
November 18, 2025 at 2:32 PM
The glob library on npm currently has a CVE. It's entirely predictable since it has 26 dependencies.
If you're getting a security warning from glob it's a good time to see if you can switch to a lighter dependency such as tinyglobby or Node's built-in glob functionality: nodejs.org/api/fs.html#...
If you're getting a security warning from glob it's a good time to see if you can switch to a lighter dependency such as tinyglobby or Node's built-in glob functionality: nodejs.org/api/fs.html#...
When reducing dependencies in Svelte projects, I was really surprised how many dependencies the typical glob library has and ended up switching most of the JS ecosystem to tinyglobby once it became available. With one final PR pending, the Svelte ecosystem is nearly free of extra glob dependencies!
tinyglobby is a great success, and has shown us how much we can improve perf for everyone. here's some of the story!
big thanks to @superchupu.dev and @benmccann.com for putting so much work into this and the migrations/adoption. we're lucky to have both in the @e18e.dev community 💙
big thanks to @superchupu.dev and @benmccann.com for putting so much work into this and the migrations/adoption. we're lucky to have both in the @e18e.dev community 💙
tinyglobby: a success story in modernization and performance
The story of tinyglobby, one of the e18e community's most successful projects
e18e.dev
November 11, 2025 at 5:07 PM
When reducing dependencies in Svelte projects, I was really surprised how many dependencies the typical glob library has and ended up switching most of the JS ecosystem to tinyglobby once it became available. With one final PR pending, the Svelte ecosystem is nearly free of extra glob dependencies!
Reposted by Ben McCann
@pnpm.io added a `trustPolicy` option in 10.21.
It allows you to prevent installing potentially malicious dependency updates that are not signed like previous versions.
pnpm.io/blog/release...
Thank you for all the performance, productivity and security enhancements over the last years 💜
It allows you to prevent installing potentially malicious dependency updates that are not signed like previous versions.
pnpm.io/blog/release...
Thank you for all the performance, productivity and security enhancements over the last years 💜
November 10, 2025 at 9:37 AM
@pnpm.io added a `trustPolicy` option in 10.21.
It allows you to prevent installing potentially malicious dependency updates that are not signed like previous versions.
pnpm.io/blog/release...
Thank you for all the performance, productivity and security enhancements over the last years 💜
It allows you to prevent installing potentially malicious dependency updates that are not signed like previous versions.
pnpm.io/blog/release...
Thank you for all the performance, productivity and security enhancements over the last years 💜
SvelteKit 3 / Vite 8 will be built on rolldown. You can use it now if you're adventurous!
If you're not using the new remote functions, it largely works without issue and is much faster.
We'd love help in discovering any bugs that haven't been unearthed yet! Post them at github.com/vitejs/rolld...
If you're not using the new remote functions, it largely works without issue and is much faster.
We'd love help in discovering any bugs that haven't been unearthed yet! Post them at github.com/vitejs/rolld...
November 4, 2025 at 8:23 PM
SvelteKit 3 / Vite 8 will be built on rolldown. You can use it now if you're adventurous!
If you're not using the new remote functions, it largely works without issue and is much faster.
We'd love help in discovering any bugs that haven't been unearthed yet! Post them at github.com/vitejs/rolld...
If you're not using the new remote functions, it largely works without issue and is much faster.
We'd love help in discovering any bugs that haven't been unearthed yet! Post them at github.com/vitejs/rolld...
Reposted by Ben McCann
apps.apple.com was rewritten in svelte ⚡🧡
November 3, 2025 at 7:30 PM
apps.apple.com was rewritten in svelte ⚡🧡
Yes! Let's set the record straight. Biome has very little support for Svelte. It's marketing gone overboard. It has no Svelte-specific rules that I'm aware of. I don't think it will ever be a competitive offering. My eyes are on oxlint, which is working towards being able to run eslint-plugin-svelte
> While we’ve done extensive work to handle many patterns, there are cases and framework-specific syntaxes that may not yet be fully supported (for example Svelte control-flow syntax, or Astro JSX-like syntax).
Sooo... Not full support then 😅
Sooo... Not full support then 😅
October 25, 2025 at 1:49 PM
Yes! Let's set the record straight. Biome has very little support for Svelte. It's marketing gone overboard. It has no Svelte-specific rules that I'm aware of. I don't think it will ever be a competitive offering. My eyes are on oxlint, which is working towards being able to run eslint-plugin-svelte
Reposted by Ben McCann
i rewrote a popular next.js site in svelte. before/after. <3 svelte
October 24, 2025 at 12:55 PM
i rewrote a popular next.js site in svelte. before/after. <3 svelte
New Kickstarter just dropped. I'm tempted to get one to see how it compares to the electric treadmill I have at my desk.
www.kickstarter.com/projects/981...
www.kickstarter.com/projects/981...
Office Walker - The Manual Walking Pad For Your Office
Durable, compact, quiet, beautiful!
www.kickstarter.com
October 23, 2025 at 6:27 PM
New Kickstarter just dropped. I'm tempted to get one to see how it compares to the electric treadmill I have at my desk.
www.kickstarter.com/projects/981...
www.kickstarter.com/projects/981...
I rented a tiny home on Airbnb to work from for the day. This is so nice and such a break from having kids run into my office every two minutes!
Now if only I could finish figuring out how to get web sockets working in my SvelteKit robotic teleop app!
Now if only I could finish figuring out how to get web sockets working in my SvelteKit robotic teleop app!
October 15, 2025 at 4:28 PM
I rented a tiny home on Airbnb to work from for the day. This is so nice and such a break from having kids run into my office every two minutes!
Now if only I could finish figuring out how to get web sockets working in my SvelteKit robotic teleop app!
Now if only I could finish figuring out how to get web sockets working in my SvelteKit robotic teleop app!
I'm a bit pleased to learn that Cloudflare found SvelteKit to be nearly an order of magnitude faster than Next.js. We've invested in Svelte's speed, but not SvelteKit's, so I suspect there's still much more room for improvement.
Oh... what's this, you ask? Just a benchmark that coincidentally shows how fast SvelteKit is compared to Next.js 🤷♂️
How fast, you ask? Just 7-10x. No biggie.
Svelte ❤️
How fast, you ask? Just 7-10x. No biggie.
Svelte ❤️
October 15, 2025 at 9:20 AM
I'm a bit pleased to learn that Cloudflare found SvelteKit to be nearly an order of magnitude faster than Next.js. We've invested in Svelte's speed, but not SvelteKit's, so I suspect there's still much more room for improvement.