Saul
@saulhardman.com
Senior frontend engineer at evryone.io. Interested in component libraries, design systems, and accessibility. He/him or they/them.
🇬🇧 🇩🇰 🫶 🌱 🥏 🧗
✍️ viewsource.io
🔗 saulhardman.com
🐙 github.com/saulhardman
🇬🇧 🇩🇰 🫶 🌱 🥏 🧗
✍️ viewsource.io
🔗 saulhardman.com
🐙 github.com/saulhardman
Reposted by Saul
in light of the current supply chain attacks, I've just published a @github.com action to detect packages that _lose_ their provenance.
📦 supports pnpm-lock.yaml, package-lock.json, yarn.lock (v1)
🎨 inline GitHub annotations
✅ JSON output + configurable
💪 published in TS with zero deps
📦 supports pnpm-lock.yaml, package-lock.json, yarn.lock (v1)
🎨 inline GitHub annotations
✅ JSON output + configurable
💪 published in TS with zero deps
GitHub - danielroe/provenance-action: GitHub Action that detects dependency provenance downgrades from lockfile changes (npm/pnpm/yarn).
GitHub Action that detects dependency provenance downgrades from lockfile changes (npm/pnpm/yarn). - danielroe/provenance-action
github.com
September 16, 2025 at 12:17 PM
in light of the current supply chain attacks, I've just published a @github.com action to detect packages that _lose_ their provenance.
📦 supports pnpm-lock.yaml, package-lock.json, yarn.lock (v1)
🎨 inline GitHub annotations
✅ JSON output + configurable
💪 published in TS with zero deps
📦 supports pnpm-lock.yaml, package-lock.json, yarn.lock (v1)
🎨 inline GitHub annotations
✅ JSON output + configurable
💪 published in TS with zero deps
Reposted by Saul
Did you know that you don't need to use transform for CSS rotate, translate, and scale anymore?
It's been available for most users for a while at this point, but I still hear people not knowing that these are available all the time.
It's been available for most users for a while at this point, but I still hear people not knowing that these are available all the time.
December 2, 2024 at 9:57 PM
Did you know that you don't need to use transform for CSS rotate, translate, and scale anymore?
It's been available for most users for a while at this point, but I still hear people not knowing that these are available all the time.
It's been available for most users for a while at this point, but I still hear people not knowing that these are available all the time.
Reposted by Saul
I'm hoping this becomes a solid business case for why more open protocol, choose-your-own-algo, social media and similar platforms should exist. It almost feels like a public utility. Like the open web.
Traffic from Bluesky's @bsky.app to @theguardian.com is already 2x that of Threads
In its first week on the platform & with 300k followers, Bluesky traffic from @theguardian.com posts is already higher than it was from TwX in any week in 2024, where the account had 10.8m followers, but🧵
In its first week on the platform & with 300k followers, Bluesky traffic from @theguardian.com posts is already higher than it was from TwX in any week in 2024, where the account had 10.8m followers, but🧵
November 28, 2024 at 4:40 PM
I'm hoping this becomes a solid business case for why more open protocol, choose-your-own-algo, social media and similar platforms should exist. It almost feels like a public utility. Like the open web.