Bjorn Lu

Small update to the GitHub AgentScan userscript: - New "Bounty Hunter" label - Use "Suspicious" label for mixed results - Slightly faster AgentScan detection (by running in the worker itself now) Check it out: github.com/bluwy/github...

Today we're launching ai-policy.dev! A collaboration of me, @danielroe.dev and @matteogabriele.npmx.social - this provides a few human curated AI contribution policies you can choose from. Our hope is that this will help you better define your stance and what kind of contributions you accept 🙏

Got my ticket for ViteConf! viteconf.org/tickets/t/GI...

pnpm has become quite the slopfest

Wrote a userscript that adds "AI" labels to users detected by agentscan.tools (by @matteogabriele.npmx.social)! Much needed hints to judge "contributions" these days. 👉 github.com/bluwy/github...

i've written up some thoughts about AI in the open source world, and more importantly, why humanity is important. its a bit wordy and doomy but this is an important topic right now. there is still a lot of good in the OSS world at least ❤️

Changesets v3 is here! 🦋 After months of chipping away at issues alongside @bluwy.me, @haglund.dev, and many other contributors, we’re excited to finally share it. changesets.dev/blog/announc...

npm still recommends a trusted publishing workflow that allows any jobs and steps to publish, instead of limiting to just one step or publish flow (which is easily possible with tokens before). amazing.

npm still recommends a trusted publishing workflow that allows any jobs and steps to publish, instead of limiting to just one step or publish flow (which is easily possible with tokens before). amazing.

Seeing this in PRs honestly gives me no confidence at all

I always knew @nicr.dev was behind oxfmt

I re-watched last year Joyee's @webengineshackfest.org talk. I can't recommend it enough. There are many lessons on the require(esm) story. If you want adoption, meet developers where they are, build bridges for them to move to the future you want.

I seem to get a lot more done when I procrastinate on reviewing big PRs

Among the big corpos in web dev lately, I’m happy it was Cloudflare. The smart folks from VZ deserve it too.

VoidZero, the team behind Vite, Vitest, Rolldown, Oxc, and Vite+, is joining Cloudflare. Vite stays open source, vendor-agnostic, and built for everyone. https://cfl.re/4dR0LYA

Today, VoidZero joins Cloudflare. Vite remains MIT, vendor-neutral, and stewarded by the same wider team. The same goes for Vitest, Rolldown, and Oxc. Cloudflare is also committing $1M to an OSS fund to support independent development in the Vite ecosystem.

Two less extensions to install for me. Pretty nice!

In node-modules-inspector@2.1.0, we added a new report page "Maintainer Actions", which lists actionable changes for package maintainers to move the ecosystem forward. With pre-constructed prompts to copy if you want agents to do that for you. github.com/antfu/node-m...

The latest npm security incident has a slightly different shape but would still have been mitigated by what I suggested back in January. humanwhocodes.com/blog/2026/01...

Just released a new version of github.com/bluwy/npm-us... to fix the dark mode syntax highlighting issues. Apparently it's using the GitHub Light theme in dark mode, now swapped to GitHub Dark. Before / After:

FYI if you use pnpm and upgraded from Vite 7 -> 8, you might still have esbuild installed but unused. You can purge it out by: 1. Set `autoInstallPeers: false` in `pnpm-workspace.yaml` 2. `pnpm i` 3. Undo no1 4. `pnpm i`

The little things! This should help me clear my backlogs better

Just published a new version of `create-vite-extra` matching the new designs and setup from `create-vite`!

dark mode on www.npmjs.com ???

Anti-lockfile believers pulling in axios

Just two LLMs talking to each other 🫠 github.com/vitejs/vite/...

Join the Vite ecosystem tomorrow to celebrate the Vite Team 5th Anniversary by rewatching together the Vite Documentary! Let's remember the stories of the people who connected to extend together our shared commons. And stay at 3:45 PM UTC to participate in the live stage after the movie 💜

It is time

Made a thing to compare prebuilt binary sizes. github.com/bluwy/npm-pr...

⚡️ Vite 8.0 is here! The most significant architectural change since Vite 2. ⏬ Powered by @rolldown.rs bringing faster production builds and more consistency 🛤️ New features such as tsconfig paths and emitDecoratorMetadata support vite.dev/blog/announc...

We're joining with the Vite team to re-premiere our Vite documentary!⚡️ 📅 Happening 19th March at 4pm CET | 10am CST 📺 Screening on the Vite website 💬 Followed by a live stage on Discord with Vite devs from the film Come hang out!

What's wrong with people

Just as I was about to go on vacation too, npmx knows me well

Wouldn’t have believed where we are now in merely two months

Discord ignore list is really saving my sanity

first vite team meeting in months 🥹 these are my people, some of the best souls I know In this call @arnaud-barre.bsky.social @bluwy.me @dominikg.dev @hiogawa.bsky.social @patak.dev @sapphi.red @erus.dev ⚡ thanks for always being there for me forever @vite.dev core team 💜

Always good to see projects normalizing saying “npm, pnpm, yarn” over “npm, yarn, pnpm”

We have a unique opportunity with npmx. We're building something very special together. I want to give myself the chance to focus on helping steward the project. I'm going to be working as an independent open source developer this year. Support my work and help me focus on npmx long-term 🙏

hey bluesky 👋

Frameworks that default to prefetching on viewport enter 😑