@vuejs.org @vite.dev @vue-macros.dev @vueuse.org @unjs.io @rolldown.rs elk.zone
bsky.app/profile/chen...
Swapping import "typescript" with require('typescript').
It skips Node's cjs-module-lexer overhead. 😅
bsky.app/profile/chen...
For example ⬇️
github.com/sxzz/rolldow...
For example ⬇️
github.com/sxzz/rolldow...
2. Enable npm 2FA for both authorization and publishing.
3. Use trusted publishing and remove all npm CI tokens.
4. Only invite maintainers who follow these security practices.
- The top four packages were all impacted.
- More than half of the top ten packages were affected.
github.com/sxzz/npm-top...