Notices by Zach Leatherman :11ty: (zachleat@fediverse.zachleat.com)

Today on Trans Day of Visiblity I’m thankful to folks living their lives in an unapologetically authentic way — truly showing us what freedom can look like when we discard the baggage society has imposed on all of us. Love y’all.

can we have a feature where a toot self destructs when it hits 50 boosts

bribecoding is a new phenomenon where you pay open source developers a living wage to work on projects that your business uses

it’s hard not to be jaded when facial recognition is being used in criminal investigations while our industry is having trouble accurately testing whether two strings are equal

Why does socket.dev report that the latest version of next.js has a malware dependency? https://socket.dev/npm/package/next/alerts/15.2.3?tab=dependencies

“Malicious code in gen-mapping (npm) Any computer that has this package installed or running should be considered fully compromised.”

Update: looks like this is a pretty big flaw in the vulnerability scanner — not in next (check the replies for more info)

Update: thanks to @chrisw_b for hunting this down: looks like a huge flaw in the vulnerability scanner being used by these tools (it ignores namespaces on package names!)

More info:

https://github.com/jridgewell/gen-mapping/issues/12
https://github.com/anchore/grype/issues/1701

are we ready to reconcile how many tech spaces have at least one anger-as-a-personality-substitute man that everyone just tolerates (if not idolizes)

dismissing valid feedback as “change aversion” is a big ol’ red flag 🚩🚩🚩

let’s keep what AI in w3.org/WAI/ means between us until after the investment checks have been written, ok

Had a delightful conversation with @DavidDarnes and Matt Johnson about the unique space “Design Engineer” occupies in web development https://www.podcastawesome.com/2092855/episodes/16692493-what-the-heck-is-a-design-engineer-with-dave-darnes

Inspired by Dave’s recent blog post! https://zeroheight.com/blog/design-engineer/

automated themed screenshot border colors

If you’re curious, I used the brand new `@11ty/image-color` to fetch the border colors from each site’s favicon/avatar: https://fosstodon.org/@eleventy/114076444351199781

This open source work is part of a larger migration of the Font Awesome blog (Blog Awesome) from WordPress to Eleventy, currently ongoing!

https://github.com/11ty/eleventy-import was also born from that too!

@mattly this is *incredible* knowledge to share — thank you so much

I’ve been playing around with extracting colors from favicon images as a shorthand for the theme colors of a website — can y’all think of a better or easier way? Something to do with using a site’s CSS directly?

@feld you’re confident that my OS can do this without knowing what my OS is? 😅

is… is this where we’re at now?

instead of a hyperlink to the app store (which was already not particularly web-friendly) we’re obfuscating links as smartphone-first QR-codes?

via https://www.deepseek.com/

I’ve been to far too many family funerals in the past couple of years.

When my time is up (far, far from now) I hope that whoever speaks offers the listeners a message of acceptance and peace — not one of fire and brimstone, not one of conditional love through unconditional allegiance.

Take care of each other, y’all ❤️

For the record, the creator of the Remix JavaScript framework posted in defense of Elon’s fascist salute yesterday.

modern software (pejorative)