Bun ported to Rust in 6 days(twitter.com)

89 points by qprofyeh 5 months ago | 2 comments

BM25 in PostgreSQL(blog.vectorchord.ai)

129 points by gaocegege 1 year ago | 25 comments

The 100 hour gap between a vibecoded prototype and a working product(kanfa.macbudkowski.com)

219 points by kiwieater 7 months ago | 291 comments

Setting Up an RK3588 SBC QEMU Hypervisor with ZFS on Debian(blog.kumio.org)

59 points by kumiokun 1 year ago | 17 comments

Overcoming pitfalls of Postgres logical decoding(blog.peerdb.io)

27 points by saisrirampur 2 years ago | 4 comments

PostgreSQL Full-Text Search: Fast When Done Right (Debunking the Slow Myth)(blog.vectorchord.ai)

377 points by VoVAllen 1 year ago | 80 comments

A VectorChord blog post arguing that PostgreSQL full-text search is fast when configured correctly, debunking claims that it is slow.

NPM debug and chalk packages compromised(aikido.dev)

1287 points by universesquid 1 year ago | 699 comments

Aikido Security blog post reporting that the popular npm packages debug and chalk were compromised with malicious code in a supply-chain attack.

NPM flooded with malicious packages downloaded more than 86k times(arstechnica.com)

349 points by jnord 1 year ago | 248 comments

Ars Technica article on the PhantomRaven campaign, in which malicious NPM packages that fetch dependencies from untrusted sites were downloaded over 86,000 times.

DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware(github.com)

367 points by tosh 1 year ago | 263 comments

GitHub security advisory reporting that DuckDB npm packages (duckdb 1.3.3, node-api, node-bindings, duckdb-wasm 1.29.2) were published with malware, listing patched versions.

Upcoming breaking changes for npm v12(github.blog)

459 points by plasma 4 months ago | 189 comments

GitHub Changelog post announcing upcoming breaking changes in npm version 12.

Shai-Hulud Returns: Over 300 NPM Packages Infected(helixguard.ai)

967 points by mrdosija 11 months ago | 733 comments

HelixGuard blog post reporting that the Shai-Hulud worm returned, infecting over 300 npm packages via a fake Bun runtime within hours.

My failed attempt to shrink all NPM packages by 5%(evanhahn.com)

349 points by todsacerdoti 1 year ago | 226 comments

Evan Hahn's blog post recounting his rejected 2022 proposal to reduce newly published npm package sizes by about 5% with backwards-compatible compression.