Darcy Clarke
@darcyclarke.me
@vlt.sh Founder & Chief End-User Officer
Prev: GitHub, npm & Themify Co-Founder
Prev: GitHub, npm & Themify Co-Founder
👋🏻 If you're at @jsconf.bsky.social NA this week, come say hi to our team @vlt.sh ⚡📦 @ruyadorno.com, @lukekarrys.com & our Design Engineer (Jason Korol) will be there for both the conf & Node.js Collab Summit 🚀🐢
October 13, 2025 at 12:06 PM
👋🏻 If you're at @jsconf.bsky.social NA this week, come say hi to our team @vlt.sh ⚡📦 @ruyadorno.com, @lukekarrys.com & our Design Engineer (Jason Korol) will be there for both the conf & Node.js Collab Summit 🚀🐢
Why are @github.com tokens allowed to have no expiry but @npmjs.bsky.social are about to make every IT team's lives a living hell? This is just more security theatre. Think harder @microsoft.com.
October 10, 2025 at 8:29 PM
Why are @github.com tokens allowed to have no expiry but @npmjs.bsky.social are about to make every IT team's lives a living hell? This is just more security theatre. Think harder @microsoft.com.
I'm very happy we've got one in the @vlt.sh office. Gets a fair bit of use. Most of our designs/drawings all end up looking like toasters for some reason though...
September 21, 2025 at 3:23 PM
I'm very happy we've got one in the @vlt.sh office. Gets a fair bit of use. Most of our designs/drawings all end up looking like toasters for some reason though...
Yes (via. `npm config set before=... --location=<global|user|project>`) but not the dynamic/relative date (see screenshot). That said, you can always add the `npm config set` command to your .bashrc/.zshrc file so the config updates every time you start a new terminal session (see second screenshot)
September 17, 2025 at 3:09 AM
Yes (via. `npm config set before=... --location=<global|user|project>`) but not the dynamic/relative date (see screenshot). That said, you can always add the `npm config set` command to your .bashrc/.zshrc file so the config updates every time you start a new terminal session (see second screenshot)
⚡ Point. Click. Discover.
🚀 We're excited to unveil a new Query Builder to @vlt.sh's UI. It's now dead simple to visually navigate complex dependency graph filters without typing a thing. No need to memorize our selector syntax (if you don't want to).
🚀 We're excited to unveil a new Query Builder to @vlt.sh's UI. It's now dead simple to visually navigate complex dependency graph filters without typing a thing. No need to memorize our selector syntax (if you don't want to).
September 4, 2025 at 3:28 PM
⚡ Point. Click. Discover.
🚀 We're excited to unveil a new Query Builder to @vlt.sh's UI. It's now dead simple to visually navigate complex dependency graph filters without typing a thing. No need to memorize our selector syntax (if you don't want to).
🚀 We're excited to unveil a new Query Builder to @vlt.sh's UI. It's now dead simple to visually navigate complex dependency graph filters without typing a thing. No need to memorize our selector syntax (if you don't want to).
🔥 Just your yearly reminder that the JS ecosystem could be much worse off... stuck in the *first level* of "Dependency Hell" like many other ecosystems with minimal options/diversity... lucky for us, we get to face much hotter problems 😉
September 4, 2025 at 3:21 AM
🔥 Just your yearly reminder that the JS ecosystem could be much worse off... stuck in the *first level* of "Dependency Hell" like many other ecosystems with minimal options/diversity... lucky for us, we get to face much hotter problems 😉
Yea - you can test it yourself (see screenshot attached). I believe there's roughly a ~10 token limit per OAuth Authorized App where they'd then start to popping off after that (so just run `gh auth refresh` 10 times & you're good 😉). Again, no UI/UX that lists these tokens from GH (no API either).
August 28, 2025 at 9:13 PM
Yea - you can test it yourself (see screenshot attached). I believe there's roughly a ~10 token limit per OAuth Authorized App where they'd then start to popping off after that (so just run `gh auth refresh` 10 times & you're good 😉). Again, no UI/UX that lists these tokens from GH (no API either).
Notably, I think paying a recruiter for non-leadership roles is a waste but LinkedIn is on another level. I've always hated the advertising industry & never thought posting a job would be treated as advertising in disguise. Seems like the "state-of-the-art" in "professional networks"/HR is a swamp.
July 23, 2025 at 6:40 PM
Notably, I think paying a recruiter for non-leadership roles is a waste but LinkedIn is on another level. I've always hated the advertising industry & never thought posting a job would be treated as advertising in disguise. Seems like the "state-of-the-art" in "professional networks"/HR is a swamp.
I know the adage, "you get what you pay for" but in this case, I've given LinkedIn ALL my information about my career & "professional network" for well over a decade - I'd expect to get something back that wasn't "pay us thousands of dollars more to access that network". I don't need "promotion".
July 23, 2025 at 6:40 PM
I know the adage, "you get what you pay for" but in this case, I've given LinkedIn ALL my information about my career & "professional network" for well over a decade - I'd expect to get something back that wasn't "pay us thousands of dollars more to access that network". I don't need "promotion".
True story, I posted a job last night & *poof* the budget was gone in ~15min. Results: with a max budget of $100USD (the lowest possible) I got 2 applicants & 10 "viewers"(whatever that means?). That's an INSANE CPI/CPC w/ zero insight on price determination, quality of impressions or demographics.
July 23, 2025 at 6:40 PM
True story, I posted a job last night & *poof* the budget was gone in ~15min. Results: with a max budget of $100USD (the lowest possible) I got 2 applicants & 10 "viewers"(whatever that means?). That's an INSANE CPI/CPC w/ zero insight on price determination, quality of impressions or demographics.
Worse, if you choose the "average daily budget" they can & do go over that budget all the time (to the tune of >50% the budget). Again, zero transparency as to what you got for that money & the whole experience is clunky AF with missing table-stakes features (ex. preview) while they charge premiums.
July 23, 2025 at 6:40 PM
Worse, if you choose the "average daily budget" they can & do go over that budget all the time (to the tune of >50% the budget). Again, zero transparency as to what you got for that money & the whole experience is clunky AF with missing table-stakes features (ex. preview) while they charge premiums.
But get this, they force you to set either a daily "average budget" or a max total for the campaign. Thing is, they don't tell you how they meter/charge that "budget" which is absolutely INSANE. No visibility into what you're getting for your money.
July 23, 2025 at 6:40 PM
But get this, they force you to set either a daily "average budget" or a max total for the campaign. Thing is, they don't tell you how they meter/charge that "budget" which is absolutely INSANE. No visibility into what you're getting for your money.
Posting a job to LinkedIn is a dumpster fire 💩🔥 I don't know how they're still running their opaque pricing racket. Apparently, if you have a "hot" job title (ie. ANY at all right now) then you MUST pay for a "promoted" posting 🤨 Think Uber's surge pricing but drivers are paying & MUST pay to drive.
July 23, 2025 at 6:40 PM
Posting a job to LinkedIn is a dumpster fire 💩🔥 I don't know how they're still running their opaque pricing racket. Apparently, if you have a "hot" job title (ie. ANY at all right now) then you MUST pay for a "promoted" posting 🤨 Think Uber's surge pricing but drivers are paying & MUST pay to drive.
Watching @bizza.pizza speak at @github.com HQ like it's early 2020... only took 5+ years & me quitting to finally see the inside of this office 🤦🏻♂️ Continue Dev landed a good one
June 3, 2025 at 1:17 AM
Watching @bizza.pizza speak at @github.com HQ like it's early 2020... only took 5+ years & me quitting to finally see the inside of this office 🤦🏻♂️ Continue Dev landed a good one
The vibes these days... #PromptAndPray
April 1, 2025 at 2:21 PM
The vibes these days... #PromptAndPray
We're back in business! Big thanks to @voodootikigod.bsky.social & @openjs.bsky.social for bringing JSConf back to NA ❤️ The whole @vlt.sh team will be there & hopefully many old & new faces. Get an early bird ticket before they are gone!
events.linuxfoundation.org/jsconf-north...
events.linuxfoundation.org/jsconf-north...
March 11, 2025 at 9:34 PM
We're back in business! Big thanks to @voodootikigod.bsky.social & @openjs.bsky.social for bringing JSConf back to NA ❤️ The whole @vlt.sh team will be there & hopefully many old & new faces. Get an early bird ticket before they are gone!
events.linuxfoundation.org/jsconf-north...
events.linuxfoundation.org/jsconf-north...
Watching @mhdawson.bsky.social share how the @nodejs.org project works/collaborates & the Next-10 Initiative/WG #nodejs #future
February 28, 2025 at 3:42 PM
Watching @mhdawson.bsky.social share how the @nodejs.org project works/collaborates & the Next-10 Initiative/WG #nodejs #future
🔗 Modernizing JS Supply Chain Security: tinyurl.com/modern-2025
February 27, 2025 at 11:31 PM
🔗 Modernizing JS Supply Chain Security: tinyurl.com/modern-2025
🎤 I had two amazing talks here @ @confooca.bsky.social over the last two days. Big thanks to Yann & the team that run this amazing 🇨🇦 conference here in Montreal.
If you want to check out my slide decks they are:
🔄 Securing the JS Ecosystem with Reproducibility: tinyurl.com/reproduce-2025
And...
If you want to check out my slide decks they are:
🔄 Securing the JS Ecosystem with Reproducibility: tinyurl.com/reproduce-2025
And...
February 27, 2025 at 11:31 PM
🎤 I had two amazing talks here @ @confooca.bsky.social over the last two days. Big thanks to Yann & the team that run this amazing 🇨🇦 conference here in Montreal.
If you want to check out my slide decks they are:
🔄 Securing the JS Ecosystem with Reproducibility: tinyurl.com/reproduce-2025
And...
If you want to check out my slide decks they are:
🔄 Securing the JS Ecosystem with Reproducibility: tinyurl.com/reproduce-2025
And...
🚀 We just launched `$ npx reproduce <pkg>`
February 26, 2025 at 3:11 PM
🚀 We just launched `$ npx reproduce <pkg>`
🔥 Our new Design Engineer Jason Korol wrote up an awesome article on some recent ships related to the @vlt.sh GUI, including:
💾 Saved Queries
🏷️ Labelling
🔁 Interactive Dep Management
🖼️ Improved Metadata
#gui #interactive #dashboard #query #interactive #dependencies
💾 Saved Queries
🏷️ Labelling
🔁 Interactive Dep Management
🖼️ Improved Metadata
#gui #interactive #dashboard #query #interactive #dependencies
February 13, 2025 at 4:15 PM
🔥 Our new Design Engineer Jason Korol wrote up an awesome article on some recent ships related to the @vlt.sh GUI, including:
💾 Saved Queries
🏷️ Labelling
🔁 Interactive Dep Management
🖼️ Improved Metadata
#gui #interactive #dashboard #query #interactive #dependencies
💾 Saved Queries
🏷️ Labelling
🔁 Interactive Dep Management
🖼️ Improved Metadata
#gui #interactive #dashboard #query #interactive #dependencies
A great talk by @lukekarrys.com on performing lockfile surgery which is getting much easier with @vlt.sh
January 31, 2025 at 8:34 PM
A great talk by @lukekarrys.com on performing lockfile surgery which is getting much easier with @vlt.sh