💼 Engineer integrating web frameworks @netlify.com 🔨 Open source maintainer @npmx.dev 🏡 https://philippeserhal.comhttps://blacksky.community/profile/philippeserhal.comhttps://blacksky.community/profile/philippeserhal.com/post/3mlmix5ixes2wThe @netlify.com security team has been monitoring today's npm supply chain breach. Thank you @socket.dev for the great intel! We've reached out to a small set of affected customers. Sites created by Agent Runners unaffected (all deps pinned). We have no evidence that Netlify itself is affected. [contains quote post or other embedded content]12 May 2026 00:13 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mlmix5ixes2whttps://blacksky.community/profile/philippeserhal.com/post/3mlmia6hpos2uThat was fast! [contains quote post or other embedded content]12 May 2026 00:00 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mlmia6hpos2uhttps://blacksky.community/profile/philippeserhal.com/post/3mlmh4gbpas2u⚠️ You may want to check once more. The list keeps growing. It's up to 385 packages now. @socket.dev have added a CSV export for your scripting convenience 🥲. [contains quote post or other embedded content]11 May 2026 23:40 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mlmh4gbpas2uhttps://blacksky.community/profile/philippeserhal.com/post/3mlmc6frix22e⚠️ If you use any TanStack package in any of your projects and there's any chance any of them was updated today, stop what you're doing and read this. ... Actually there are 121 non-tanstack packages affected as well, so check the list anyway. [contains quote post or other embedded content]11 May 2026 22:11 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mlmc6frix22ehttps://blacksky.community/profile/philippeserhal.com/post/3mllq7ibpqk26It's so beautiful. p.s. @npmx.dev is still just in alpha 🫢 [contains quote post or other embedded content]11 May 2026 16:50 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mllq7ibpqk26https://blacksky.community/profile/philippeserhal.com/post/3mle5hmj5j22sIf you have any Next.js sites, upgrade them now! Yes, yet again. Check out platform-specific guidance: @netlify.com → https://www.netlify.com/changelog/2026-05-08-react-nextjs-security-vulnerabilities/ @cloudflare.social → https://developers.cloudflare.com/changelog/post/2026-05-06-react-nextjs-vulnerabilities/ @vercel.com → https://vercel.com/changelog/next-js-may-2026-security-release08 May 2026 16:26 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mle5hmj5j22shttps://blacksky.community/profile/philippeserhal.com/post/3mldliyisbc25If you were still unsure whether the Mythos announcement was just a marketing stunt: https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/ Prepare.08 May 2026 11:04 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mldliyisbc25https://blacksky.community/profile/philippeserhal.com/post/3mla5k7yt522uokay wait a sec has anyone ever thought of creating atproto records as presence pings and then WebRTC for p2p realtime comms? you'd get a full decentralized thingy without needing a centralized thingy for the presence thingy. is that anything [contains quote post or other embedded content]07 May 2026 02:17 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mla5k7yt522uhttps://blacksky.community/profile/philippeserhal.com/post/3ml4uljhhs223It seems silly but features like this are important because tangled is *dogfed on tangled*, so the quality of tangled impacts how maintainers and OSS contributors can improve tangled itself. 🔁 I gave up on opening some issues on the tangled repo because I couldn't attach a screenshot of the issue. [contains quote post or other embedded content]05 May 2026 18:58 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3ml4uljhhs223https://blacksky.community/profile/philippeserhal.com/post/3mkyhk6tx5s2eokay hear me out I had an idea in my dreams last night for an aproto game powered by the live stream out of spacedust.microcosm.blue is this anything04 May 2026 00:54 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mkyhk6tx5s2ehttps://blacksky.community/profile/philippeserhal.com/post/3mkye5zb73s2h👀 I have achieved continuous deployment to @netlify.com from @tangled.org. Add a workflow like so: https://tangled.org/philippeserhal.com/example-deploy-to-netlify/blob/9283f14/.tangled/workflows/deploy.yml Add site ID + Netlify PAT: https://tangled.org/philippeserhal.com/example-deploy-to-netlify#continuous-deployment-to-netlify ☑️ PR → deploy preview ☑️ Push to main → deploy to prod Deploy URLs tucked away in pipeline logs, but it's a start. https://tangled.org/philippeserhal.com/example-deploy-to-netlify/tree/main/.tangled03 May 2026 23:54 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mkye5zb73s2hhttps://blacksky.community/profile/philippeserhal.com/post/3mkx5r4jpqs2uHow might one share reusable @tangled.org spindle workflows or something like GitHub Actions... actions? Do I need to learn nix? 🫣03 May 2026 12:26 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mkx5r4jpqs2uhttps://blacksky.community/profile/philippeserhal.com/post/3mkx5enjmnk2dOn the bright side, getting a "this is a bug on our end, will fix" comment from a @tangled.org co-founder less than 1 min after your CI fails is pretty cool.03 May 2026 12:20 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mkx5enjmnk2dhttps://blacksky.community/profile/philippeserhal.com/post/3mkuyzgkskk2uGiving @tangled.org a serious try this weekend. Threading my impressions as I go 🧵.02 May 2026 15:56 +0000at://did:plc:5wdnwfs45bghuedlj3rdmani/app.bsky.feed.post/3mkuyzgkskk2u