core maintainer of https://blog.stephansama.info/https://blacksky.community/profile/stephansama.infohttps://blacksky.community/profile/stephansama.info/post/3mmgke5yfj22ni think if js had a better stdlib like go then 0 dependencies would be relatively easy. however given the current state of everything js i think pinned dependencies with auto update prs is the only way to [contains quote post or other embedded content]22 May 2026 08:47 +0000at://did:plc:l3ndqyj7dwwqq4kyr4xpbjzc/app.bsky.feed.post/3mmgke5yfj22nhttps://blacksky.community/profile/stephansama.info/post/3mmbqlege7c27im tired grandad [contains quote post or other embedded content]20 May 2026 10:55 +0000at://did:plc:l3ndqyj7dwwqq4kyr4xpbjzc/app.bsky.feed.post/3mmbqlege7c27https://blacksky.community/profile/stephansama.info/post/3mm6yqrj5w22yima just mention this package again 😂 https://github.com/stephansama/packages/blob/main/core/pnpm-hooks/README.md small pnpm hook to pin all dependencies. also recommend looking into minimumReleaseAge dedupePeers and resolutionMode to secure pnpm projects from peer dep attacks [contains quote post or other embedded content]19 May 2026 08:43 +0000at://did:plc:l3ndqyj7dwwqq4kyr4xpbjzc/app.bsky.feed.post/3mm6yqrj5w22yhttps://blacksky.community/profile/stephansama.info/post/3mm3pbe6ljk27i reworked my documentation site for my npm packages. its now using starlight instead of vitepress (still powered by typedoc). created a couple of prs in some starlight integrations to get it where i want but i love the result packages.stephansama.info https://packages.stephansama.info/18 May 2026 01:16 +0000at://did:plc:l3ndqyj7dwwqq4kyr4xpbjzc/app.bsky.feed.post/3mm3pbe6ljk27https://blacksky.community/profile/stephansama.info/post/3mlvl6wl7bc2wbecause of all the supply chain attacks that have been happening i made a `pnpm` hooks library that has a `pinAllDependencies` hook allowing consumers to pin a project hopefully preventing unwanted updates https://github.com/stephansama/packages/blob/main/core/pnpm-hooks/README.md15 May 2026 14:47 +0000at://did:plc:l3ndqyj7dwwqq4kyr4xpbjzc/app.bsky.feed.post/3mlvl6wl7bc2whttps://blacksky.community/profile/stephansama.info/post/3mlv3wj2ldk2gthats odd.. because today is opposite day 🤔 😂 [contains quote post or other embedded content]15 May 2026 10:14 +0000at://did:plc:l3ndqyj7dwwqq4kyr4xpbjzc/app.bsky.feed.post/3mlv3wj2ldk2ghttps://blacksky.community/profile/stephansama.info/post/3mlnplmagdk2lim gonna start switching my repos to tangled. i think that platform will be the future of social programming12 May 2026 11:44 +0000at://did:plc:l3ndqyj7dwwqq4kyr4xpbjzc/app.bsky.feed.post/3mlnplmagdk2lhttps://blacksky.community/profile/stephansama.info/post/3mjka7mdebs2ui got everyone at work using the same technology as me. look around the office everyone is using - nvim - tmux - npmx - zsh - wezterm - mise sometimes it feels good having influenced others15 Apr 2026 15:41 +0000at://did:plc:l3ndqyj7dwwqq4kyr4xpbjzc/app.bsky.feed.post/3mjka7mdebs2uhttps://blacksky.community/profile/stephansama.info/post/3mj367n46fc24my protoge and i came up with a new term for senior “ai” developers: senior slopper09 Apr 2026 15:55 +0000at://did:plc:l3ndqyj7dwwqq4kyr4xpbjzc/app.bsky.feed.post/3mj367n46fc24