Aviv Keller

Aviv Keller

@aviv.sh

Loves animals. Tolerates computers. ⭐️ @openjsf.org JavaScriptLandia recipient 🌐 https://aviv.sh 👾 https://github.com/avivkeller ✉️ me@aviv.sh 𝕏 https://x.com/@aviv_keller 🛠️ Security Researcher 💻 @nodejs.org Collaborator 📦 @webpack.js.org TSC

181 followers83 following284 posts

Pinned

Aviv Keller
@aviv.sh

I’m beyond thrilled to be the recipient of this year’s #JavaScriptLandia “Outstanding Contribution from a New Arrival” award! This award is truly a testament to the fact that anyone, with faith and effort, can make a meaningful impact in #OpenSource. Thank you, @openjsf.org

OpenJS Foundation@openjsf.org

Introducing 🥁🥁🥁 our JavaScriptLandia award recipients for this year! Beyond building new features, our recipients guide others, maintain essential systems, document the hard parts, and strengthen the community every step of the way. 💙 Read more about our honorees here: hubs.la/Q03NQvx10

Aviv Keller
@aviv.sh

To support new features like this, consider donating to maintainers like myself :-) it helps us put out great software for y’all

Aviv Keller reposted

webpack module bundler
@webpack.js.org

webpack is heading to @renderatl.com🍑! Aug 12–13 in Atlanta. One badge covers the OpenJS Node Interactive Summit, the Atlanta AI Expo, an MLH hackathon, and RenderFEST, with Killer Mike keynoting. GA goes from $750 → $1,000 this week, so buy your tickets today! renderatl.com/tickets

renderatl.comTickets | RenderATLGet your RenderATL badge. One ticket covers every summit, the expo, networking events, and RenderFEST. Secure your spot in Atlanta.
Aviv Keller
@aviv.sh

Have you run 𝚖𝚊𝚗 𝚗𝚘𝚍𝚎 recently? On modern versions of Node.js, It's generated automatically from our CLI documentation, so you can read the docs right in your terminal.

Aviv Keller
@aviv.sh

We’ve reached out to service providers associated with the domain, and can happily report that corepack[dot]org has been taken down. As a reminder, the only official Node.js site is nodejs.org.

nodejs.orgNode.js — Run JavaScript EverywhereNode.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
Socket@socket.dev

A fake corepack site at corepack[.]org is impersonating the Node.js Corepack tool and pushing malware to developers. The download button drops an infostealer that steals browser data and SSH keys, plus proxyware that turns your machine into a proxy node. socket.dev/blog/fake-co...

socket.devFake Corepack Site Distributes Infostealer and Proxyware to ...A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
Aviv Keller
@aviv.sh

Did you know Node.js is redesigning its API documentation? The new beta brings faster navigation, improved search, richer type information, better mobile support, version switching, and so much more. Learn more & preview today at nodejs.org/en/blog/anno...

nodejs.orgNode.js — Check out the New Node.js API Documentation PreviewNode.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

Aviv Keller reposted

webpack module bundler
@webpack.js.org

🎉 WOW! Webpack 5.109 is now available 🤯 ✨ Zero-config support for CSS, HTML, TS, and WASM 🎯 `import.meta.glob` and `import.meta.resolve` ⚡ CommonJS module concatenation 📊 Built-in progress bar Learn more: webpack.js.org/blog/2026-07...

webpack.js.orgWebpack 5.109 | webpackwebpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packaging just about any resource or asset.
Aviv Keller
@aviv.sh

TIL that my personal domain, aviv.sh, accounts for ~5% of all OpenJS contributions… apparently more than some very large companies 😅 Whoa.

Aviv Keller
@aviv.sh

The Axios attack has shown me something very important… I’m not important enough to have been a target :/

Aviv Keller reposted

Cloudflare
@cloudflare.social

Reliability is our top priority. We have declared "Code Orange: Fail Small" to focus our engineering efforts on a single goal: ensuring the causes of past outages are fundamentally eliminated. Here is how we are building a more resilient network for the future. https://cfl.re/4pOLIlC

cfl.reCode Orange: Fail Small — Our resilience plan following recent incidentsWe have declared “Code Orange: Fail Small” to focus everyone at Cloudflare on a set of high-priority workstreams with one simple goal: ensure that the cause of our last two global outages never happen...
Aviv Keller
@aviv.sh

Why is @github.com planning to charge for self-hosted runners? We’re providing the infrastructure ourselves… why should we have to pay GitHub to use it? At that point, it’s cheaper to just hook up an external CI pipeline.

Aviv Keller
@aviv.sh

The Node.js Website Team: Faster than AWS™️

Brian Muenzenmeyer@brianmuenzenmeyer.com

You know you have a good open source team when you can resolve a production outage from report, triage, debugging, fix, testing, through to PR merge and deployment in 57 minutes. #nodejs #opensource github.com/nodejs/nodej... github.com/nodejs/nodej...

github.comDownload page is blank · Issue #8248 · nodejs/nodejs.orgURL: https://nodejs.org/en/download Browser Name: Chrome Browser Version: 141.0.7390.108 Operating System: Windows 10, 22H2 How to reproduce the issue: Open nodejs.org website Navigate to Download ...

Aviv Keller reposted

OpenJS Foundation
@openjsf.org

Hey, THANK YOU JSConf! 💙 To everyone who shared their ideas, sang way too hard at karaoke, and made the hallway track feel like a family reunion... you’re the best. That's a wrap 👏

Aviv Keller reposted

Socket
@socket.dev

🚨 Supply chain attack on Nx npm packages (4.6M weekly downloads) Malware abused AI CLI tools (Claude, Gemini, Q) to steal creds + wallets, then exfiltrated to GitHub repos (s1ngularity-repository*). More than 1,000 victim accounts confirmed. 🔗 socket.dev/blog/nx-pack... #nodejs

socket.devNx npm Packages Compromised in Supply Chain Attack Leveragin...Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malwa...
Aviv Keller
@aviv.sh

Actually, the API is quite stable, but our docs were never updated. github.com/nodejs/node/...

github.comdoc: mark `path.matchesGlob` as stable by avivkeller · Pull Request #59572 · nodejs/nodeAll other glob features were marked stable in #57513, and this function stopped emitting experimental warnings in #58236. However, path.matchesGlob was never explicitly marked stable.
Liran Tal@lirantal.com

who's using the new matchesGlob Node.js API ? It's still experimental but would be cool to build on it and remove a dependency on glob

Aviv Keller reposted

James Snell
@jasnell.me

The @nodejs.org website team put together a fantastic new page outlining the support options for EOL release lines nodejs.org/en/eol Did you know that there are paid support options available if you need it for no longer maintained Node.js versions? A portion of those funds come back to the project

nodejs.orgNode.js — End-Of-LifeNode.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
Aviv Keller
@aviv.sh

After lots of planning, today we wrapped our first recurring monthly @nodejs.org web team meeting! Super proud of everything the team achieved last month… and pumped for what’s coming next! 🚀🐢

Aviv Keller reposted

Alexander Lichter
@thealexlichter.com

✨ Node.js: Now with Rolldown? Yes - to some degree! @rolldown.rs is planned to power the future API documentation generator of @nodejs.org. More info in the linked PR! github.com/nodejs/api-d...

github.comfeat(web): add web generator by avivkeller · Pull Request #285 · nodejs/api-docs-toolingFixes #7. This PR adds the web generator. Tasks / Issues P1 – Must Complete Before Merge Add more items (anyone can do this as they review1) P2 – Must complete before migration Add more items ...