Zach Leatherman

Another cool approach for this is using sqlite and http RANGE requests to make queries phiresky.github.io/blog/2021/ho...

Interested in setting aside the magical prompter and learning some web standards skills the old fashioned way? You can sign up for my online Web Components course for free until Oct 31 with the code markitzero. If you find it useful, please consider letting folks know! 🎃

I'm so gosh-darned excited! css-tricks.com/css-tricks-h...

CSS-Tricks has a new owner! Yes, I've got the keys to the castle, so to speak. And, even after 12 years of working on the site, I'll admit I'm a little overwhelmed and nervous about that. https://css-tricks.com/css-tricks-has-a-new-owner/

Yesterday I pushed samwho.dev 2.0. - Every interactive/visual post revamped. - New content added to several old posts. - New consistent visual style throughout. - Dark mode(!) - New interactive heroes for all posts that didn't have them. - Updated dog animations.

I would make a witty reply but this platform is like an echo chamber pot

11y/o just told me that a septic tank is just a fancy chamber pot and I am speechless

yo mamdani come fix my integration tests

Finally replied to an 11 year old email

Zen Browser is a great opportunity for Mozilla’s rendering engine to fill this gap for folks: zen-browser.app

Sideproject I’ve been throwing my tokens at: gtajs.wtf It’s a reimplementation of the 1997 Grand Theft Auto engine in JavaScript and WebGL. The project is not entirely finished, but since I am leaving on vacation tomorrow, I might as well just publish what I have — done is better than perfect 😀

We just sent $100,000 to 20 open source projects ($5000 each) that the Syntax team use regularly and depend on. Thanks to all the maintainers for all your time and efforts! Thanks to @sentry.io and @opensourcepledge.com for giving us the resources to do this. blog.sentry.io/another-year...

I think the underrated part is where the risk moves. With static output, a vulnerable dependency lives in the build rather than on a running server, so patching becomes a rebuild and a deploy instead of a scramble to find out what was exposed.

@sentry.io is a real one for this! $1M to open source maintainers this year 🙏🎉 for many years, Sentry was the only company using my software to actually donate to me. if nothing else, it was a big reason i decided to join the team! blog.sentry.io/another-year...

super relieved that wordpress doesn’t use php

I know folks get real mad when I say this but in times of widespread security crisis, static sites sure are nice

(generating certs for my root CA) ok now let's do a silly one

The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.

Node.js will reject TLS chains that use any of the 8 compromised eMudhra (emSign) intermediate keys, ported from Electron and matching Go and the blocks Chrome and Firefox already ship. Blocks by public key, so reissued certs don't get through. github.com/nodejs/node/...

THIS IS NOT A DRILL. If you package/distribute/maintain root stores or chain verifiers, act immediately. If you know how to remove trust in a root, consider doing it now. Otherwise, prepare to update systems as patches/mitigations come. Go users, update to Go 1.27.3 or Go 1.26.10.

The provisional SCHEDULE is live; changes still possible. perfnow.nl/schedule.html

Every long-lived website ends up with cobwebs. 🕸️ Things that used to do something, but no longer do. Like httpequiv for IE8-10, your fb:pages id or the Windows 8 tile tags. None of them do anything anymore. But which ones can you safely get rid of? The next version of Polypane will tell you!

Happy World Browser Day! I've long used "long live the web" as my motto/tagline, so today I published a blog post explaining what this phrase means to me: longlivetheweb.org/not-a-manife...

Shopify moved checkout off React and onto web components. Bundles shrank 40–85%. www.infoq.com/news/2026/10...

🚨 Web Component Klaxon 🚨

My first open source release: Tiny Tells! Six small status characters in one <tiny-tell> tag. They're animated like little cartoon characters, so a state change is a reaction, not an icon swap or a spinner. MIT licensed, 14 KB, no dependencies. tinytells.dev

Things I hope to push forward at TPAC: - Declarative fragment / client side include - declarative skeleton/shell - CSS navigation matching - parser/patch reflection in mutation observers - responsive image improvements - connection allowlists - focusreset - CSS module imports Gonna be interesting!

Made a few accessibility upgrades, prompted by some excellent feedback from Adrian Roselli. www.aaron-gustafson.com/notebook/sor...

Meta took down the No Kings instagram; TikTok banned the Musk documentary account for supposedly violating its political posting policies. A reminder that platforms are owned by the wealthiest of people, control the means of media distribution, & put their thumbs on the democracy scale as they wish

I registered a domain! 🥳

I gave a talk at EMF titled "Men in Tech #YesAllMen", in which I told my experience of being a woman in tech. I was afraid to publish it in case it affected my current or future employment. With all the current news I would like to add my 2¢. So here is the recording: youtu.be/WXL6K1lhvt0?...

Finally, this extension can fix me bsky.app/profile/hejc...

Yesterday, the CSSWG accepted my proposal for mesh gradients and diffusion curve gradients! Want to make gradients like this natively in CSS? Well, we've started the work on it. It's coming! Here's the Explainer: github.com/w3c/csswg-dr...

The CSS Linked Parameters Module is cool. You can essentially pass parameters to SVGs that are embedded on the page using the image source or background image. @pepelsbey.dev has a great post about it! Vadim's post: pepelsbey.dev/articles/svg... Spec: drafts.csswg.org/css-link-par... #svg #css

EVERYBODY LOVES MAINTENANCE Core v3.1.7 is out now: https://github.com/11ty/buildawesome/releases/tag/v3.1.7 🚨 Erases our npm audit balance 🧱 Eliminates 21 third party dependencies (121 to 100) 🍤 -8.1% size on disk (22.3 MB to 20.5 MB)

Good news (I hope): CSS-Tricks will indeed be back later this month!

It is not a common occasion at all that you get to be the first person on the web to properly document a HTML tag that shipped in a browser, but that is what I've done today. Have you ever heard about <HYPE>? I've explained it in this newly updated article: vale.rocks/posts/html-r...

JPEG XL has arrived on the web, but how does it stack up against AVIF? jakearchibald.com/2026/jpeg-xl...

If God didn’t want us to open 300 tabs, he wouldn’t have given us laptops with 16GB of RAM.

4 weeks left to get your ticket - I know you've not done it yet. Don't leave it and miss out. Who is this for? Devs, designers, product people, newbies and oldies. It's a single track day designed to reignite our connection to what we do. 2026.ffconf.org

What a wild 3 years it has been.

There's a really cool alignment feature in CSS Grid Lanes that makes items stretch along the stacking axis, filling any remaining empty space. It's great when you don't want the usual jagged edge at the end of your layout. Wrote about it here ➡️ patrickbrosset.com/articles/202...

Need sortable tables? My table-sortable web component adds accessible, customizable sorting to ordinary HTML tables—and they still work when JavaScript doesn’t. www.aaron-gustafson.com/notebook/sor...

Wrote a thing on why we should have interactive lists on the web: sarahmhigley.com/writing/inte... If anyone has their own interactive list use cases that aren't covered, send them to me! I'm putting together an ARIA spec PR this month.

And the technique was first documented and implemented by … me 😊 www.bram.us/2024/02/18/c... (As noted in my post: it was @tabatkins.com and Emilio (crisal.io) who came up with the technique at the CSS WG F2F meeting back in Feb 2024)