Matt Cowley

Matt Cowley

@v4.wtf

Open-source Software Engineer by night at Alveus Sanctuary 🌎 + Node.js 💚 + cdnjs 🛠️ | 25 | he/him | https://mattcowley.co.uk

250 followers158 following99 posts

Looks like @digitalocean.com is killing their Open Source Credits Program. Very disappointing to see, but unsurprising given they’d already killed their GitHub Students credits a few months ago. I miss the days when they focused on their community goodwill efforts.

Very pleased to see that @mlhacks.bsky.social + @dev.to are running Hacktoberfest now, both trusted orgs in the community space!

Hacktoberfest@hacktoberfest.com

We're back for Hacktoberfest 2026! This year, we're not counting PRs. Instead, we’re hosting 300+ in-person “Fests” and an online event all about building with open-source and open-weight AI. Learn more and see how you can get involved. hacktoberfest.com

See it. Say it. Sorted. 🤝 Patching security issues during an incident at midnight is my favourite kind of engineering.

Matt Cowley reposted

Replying to @v4.wtf

Grateful to the folks at Cloudflare who’ve been working to reduce this risk the last few days. - Package moved to the Astro org, no single-author control - Binary replaced with lightweight native TS version - Bundled into the wrangler build to avoid the install-time dependency

👀 Cloudflare's wrangler CLI (~20m installs/week) has a new dependency... a ~600kb WASM binary used by no other package on npm: `rosie-skills`. I've been told that it is a legitimate package published by an employee, but it really looks like the start of a supply chain attack...

Grateful to the folks at Cloudflare who’ve been working to reduce this risk the last few days. - Package moved to the Astro org, no single-author control - Binary replaced with lightweight native TS version - Bundled into the wrangler build to avoid the install-time dependency

👀 Cloudflare's wrangler CLI (~20m installs/week) has a new dependency... a ~600kb WASM binary used by no other package on npm: `rosie-skills`. I've been told that it is a legitimate package published by an employee, but it really looks like the start of a supply chain attack...

Always disheartening to see a company abandon its community efforts, especially one you've advocated for and supported for a long time. Not the first time I've seen this happen, won't be the last, but it always hurts, and it never goes well for the company in the long run.

Spent my last few weekends working on the cdnjs API worker to improve the HTML "human" output for it, with the aim being to eventually serve the main site via it. Implemented my own client islands w/ Vite, and has been a lot of fun just writing React + some build tooling again.

Just got the API docs rendering with Swagger after a bunch of customisation, pretty happy with the result: api.cdnjs.com/api?output=h... The existing site is an unmaintained Nuxt.js app served via Express.js, so I'm quite excited to get all the pages ready on the worker to replace it.

Open-source, of course, and a Cloudflare worker, of course: github.com/cdnjs/api-se... Beyond building the pages themselves, the other known outstanding task is to get some actual browser testing going alongside the existing test suite. Issue open, contributions welcome.

github.comGitHub - cdnjs/api-server: 📡 API server for api.cdnjs.com - The #1 free and open source CDN built to make life easier for developers.📡 API server for api.cdnjs.com - The #1 free and open source CDN built to make life easier for developers. - cdnjs/api-server

YouTube's RSS feed availability is truly odd. Seems to break daily somewhere around 8pm UTC and then comes back promptly at 8am UTC each day. Such an odd availability pattern for something they link in the meta tags of every channel page.

Hey @imgur.com, why are you still holding onto my data and sending me emails when y'all exited the UK? Best bit is the images in the email don't even work because you blocked the UK... and I CANNOT unsubscribe as that link also goes to a blocked page...

Okay, so, with minio abandoned, what are folks using for emulating an S3 bucket in a local dev setup w/ docker compose? Looking for something lightweight and simple, our current minio setup is 15 lines in our docker compose, that's it...

I'd been getting Metro Bank statement emails for a while now, but didn't think I had an account with them. Decided to finally phone them yesterday, and after some verification over the phone, they were able to get me back into an account that I last used in 2013. Impressive.

Also, in some ways, slightly worrying that while knowing nothing about the account at all, just verbally confirming my personal details, I was able to get back into this account, take all the money out of it, and close it, all in the space of a day over the phone.

🎉 Dependabot just updated to Node.js 24 (interesting that they use a single version for their image, rather than using whatever version a given project needs)

Sigh, Dependabot continues to be a thorn in the side the second it doesn't just work as you expect it to... turns out it doesn't support Node.js 24 at all, and so because we updated our repository, we're no longer getting dependency updates or security fixes.

Sigh, Dependabot continues to be a thorn in the side the second it doesn't just work as you expect it to... turns out it doesn't support Node.js 24 at all, and so because we updated our repository, we're no longer getting dependency updates or security fixes.

Having internet-enabled smart home devices is great until the internet goes out for a prolonged period... then you can't tell Alexa to stop the alarm you set, so the only option is to unplug the thing. Oh, and I can't turn the lights on either.

NetBlocks@netblocks.org

⚠️ Confirmed: Live network data show that operator Vodafone UK is experiencing a national outage with broadband and mobile data impacted, corroborating widespread user complaints 📉 #VodafoneDown

Looks like @imgur.com is completely unavailable in the UK now, with all images showing a message that imgur isn’t available in this region. Guessing this is because of the Online Safety Act… surely this being unavailable will have no consequences for internet users in the UK…

I wonder why @github.com has been having mail delivery issues today... couldn't be because of the continual spam issues being filed, mentioning every user on GitHub, generating masses of spam notification emails. Really surprised their send reputation hasn't already gone to zero.

The last week holidaying on a very remote Greek island has been wonderful, but the fact that I've had way faster and more consistent 5G coverage here than I get at home on the outskirts of London is living very rent-free in my mind.

Matt Cowley reposted

STOMPY HAS A FRIEND! Meet our new emu ambassador, Nolie 💚 Nolie is a ~5 year old female emu that was a pet to a private owner who moved and couldn’t take her with, so now she will be with us here at Alveus to help teach people about the impacts of owning exotic pets.

Sad to see that the folks running @hacktoberfest.com this year decided to abandon the 70,000-strong official Discord server that's been used for the previous five years and switch to the DigitalOcean one... what a waste of an established community.

Glad to see the program continue on, though. This just seems like a rather odd decision, likely trying to generate more brand awareness for DigitalOcean running it.

Sad to see that the folks running @hacktoberfest.com this year decided to abandon the 70,000-strong official Discord server that's been used for the previous five years and switch to the DigitalOcean one... what a waste of an established community.

So I decided to clone the cdnjs/cdnjs repository for the first time in a while... turns out it now consumes right around 1TB on disk (with .git removed), which is not really much of a surprise when you realise it now houses 25 million files.

Just spent an hour chatting with EE about their broadband. They assured me they'd be able to install fiber even if I don't have it currently, including digging up the road. Agent goes to send the contract, and oh dear, there's an error that our address doesn't have fiber... Sigh

GitHub is rate-limiting their own Dependabot runs... leading to Dependabot opening PRs with no change logs in them... this is fun. I've had a ticket open with them for multiple weeks now, no response at all.

I managed to build a UI (with grid + aspect-ratio mess) that works correctly in Firefox and Safari, but doesn't work in Chrome. Can't think I've ever managed that before.

Very happy with how the server rack mockup turned out for the new compute section on the @alveussanctuary.org website. Thought about doing it as an SVG, but it was way more fun to build it with CSS and container query units to make it all scale nicely. alveus.gg/tech#compute

alveus.ggTech at Alveus | Alveus SanctuaryAlveus Sanctuary is a virtual education center, and with that comes the need for a lot of technology to make it all work, from livestream broadcast systems to PTZ cameras and microphones in the ambass...

Matt Cowley reposted

It's already that time of year again: we're so excited to announce our #JingleJam2025 charity partners! We can't wait to go live and support these brilliant causes that make the world a better place for children and young people this December. Here are your 2025 charities! 🧵

You love to see it when you do your self-assessment tax return and HMRC tells you they owe you money because a previous employer taxed you wrong

If you're like me and store code locally organised similar to ~/git/<owner>/<name>, you might be interested in this @vscode.dev extension I shipped today that allows you to have your `window.title` set to `<owner>/<name>` (`${parentName}/${folderName}`): marketplace.visualstudio.com/items?itemNa...

marketplace.visualstudio.comVSCode Window Title Extras - Visual Studio MarketplaceExtension for Visual Studio Code - VSCode extension that provides additional window title variables.

I suppose the advantage of CEOs being so openly political on main is that at least you know who you want to support and be associated with

Just spoke to Google Workspace about the ridiculous price increase for AI functionality I didn't ask for... expressed that to the support agent, who responded with "I really understand your concern and as a customer myself, I would feel the same."