Ashish P.
Ashish P.
@ashish-simplecoder.bsky.social
Frontend engineer | React.js | Next.js | Solid.js
10 followers23 following36 posts
Update your React versions agains
Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week. These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.
Security Practices for secure npm publishing - Enable 2FA - Enable "Trusted Publisher" in npm package settings to allow third party publisher(i.e. github workflow, gitlab workflow etc) - Use tools like snyk.io, safedep.io for scanning vulnerabilities in your project dependencies
Security Practices for secure npm publishing - Enable 2FA - Enable "Trusted Publisher" in npm package settings to allow third party publisher(i.e. github workflow, gitlab workflow etc) - Use tools like snyk.io, safedep.io for scanning vulnerabilities in your project dependencies
Security Practices for secure npm publishing - Enable 2FA - Enable "Trusted Publisher" in npm package settings to allow third party publisher(i.e. github workflow, gitlab workflow etc) - Use tools like snyk.io, safedep.io for scanning vulnerabilities in your project dependencies
Security Practices for secure npm publishing - Enable 2FA - Enable "Trusted Publisher" in npm package settings to allow third party publisher(i.e. github workflow, gitlab workflow etc) - Use tools like snyk.io, safedep.io for scanning vulnerabilities in your project dependencies
Have been working on my side project github.com/Ashish-simpl...
Ashish P. reposted
Ashish P. reposted
Zed's most requested feature (rainbow brackets ๐ ) has been merged into stable! The issue had over *1,000* upvotes on GitHub and we're excited for you to try it. zed.dev/blog/rainbow...
Ashish P. reposted
There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it. A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately. react.dev/blog/2025/12...
Ashish P. reposted
The stream is back tomorrow as I dig into what I've been working on in the world of Async & Signals. www.youtube.com/live/ori9xZh...
Ashish P. reposted
๐ค What if there were a conference without talks? Just hanging out with OSS maintainers & builders, seeing what theyโre working on, and learning cool stuff by actually talking to people. ๐คฏ What if hallway track turned into the whole event! ๐ก @tannerlinsley.com is exploring it. Interested? โฌ๏ธ
Ashish P. reposted
Node excitement ๐ Congrats to @marcoippolito.dev on making it official: type-stripping in Node 25 is now declared to be stable ๐ You can run: node index.ts The capabilities have not changed since Node 24. This is purely a maturity indicator.
Type stripping is now stable. Enjoy ๐
This is dope. Tree-shaking is not only limited to js files. JSON files are also tree-shaken.
In the latest version of @rolldown.rs, JSON imports are tree-shaken! No more superfluous JSON values in your bundle, only these that you actually access. Without any change of code or config โจ Interested in the code? Then check out the PR! github.com/rolldown/rol...
I got the Hacktoberfest 2025: Supercontributor badge from Hacktoberfest @hacktoberfest @digitalocean! www.holopin.io/hacktoberfes...
Ashish P. reposted
sharing just got easier ๐ you can now invite collaborators to your HackMD notes without email addresses or usernames fast, simple, and built for real teamwork learn more ๐ buff.ly/rOaH0Oy
Ashish P. reposted
We're live: twitch.tv/ryansolid
At 11am PT tomorrow, @igorminar.bsky.social and @anfibiacreativa.bsky.social join @tannerlinsley.com and I to talk about Web Fragments, a fresh take on Micro-Frontends. www.youtube.com/watch?v=sneu...
Ashish P. reposted
A little control goes a long way. Meet the new Site Control Centre in Zen. A single menu for the page youโre on. Take a screenshot, bookmark a site, open extensions, or check site permissions; all without digging through settings. Now available in 1.17b โ zen-browser.app/release-note...
Ashish P. reposted
Replying to @zen-browser.app
We've also packed in some extra refinements for a smoother experience: - New polished and more fluid Glance animation - Improved performance when using Split View - Redefined Compact Mode UI when 'Multiple toolbars' activated Want to support Zen's development? Donate here: โ zen-browser.app/donate/
Ashish P. reposted
View Transitions are now in all browsers! They also landed in React! developer.chrome.com/blog/view-tr...
Ashish P. reposted
Ashish P. reposted
VoidZero's @erus.dev talks about the upcoming @vitest.dev features including the new report API and multi-browser configuration as well as what to expect in Vitest 4 ๐งช Full video in comments
I got the Hacktoberfest 2025: Level 3 badge from Hacktoberfest @hacktoberfest @digitalocean! www.holopin.io/hacktoberfes...
Waited for so long!!!. It is much faster and lighter than VS Code. So many features packed inside of it. @zed.dev ๐ช
Ashish P. reposted
I got the Hacktoberfest 2025: Level 2 badge from Hacktoberfest @hacktoberfest @digitalocean! www.holopin.io/hacktoberfes...
Ashish P. reposted
Ashish P. reposted
For the first time in the 4 years I've been doing Friday streams, I will be having a @react.dev Core Team member as a guest. I'm excited to welcome @ricky.fm on to talk all things React. Past, present, future. www.youtube.com/live/3vw6EAm...
Ashish P. reposted
Donโt just browse. Command. With Zen's new command bar, navigating your browser isnโt a chore. Switch spaces, pin tabs, open extensions, create folders. All in seconds. Now available in 1.16b โ zen-browser.app/release-note...
I got the Hacktoberfest 2025: Level 0 Registered badge from Hacktoberfest! www.holopin.io/hacktoberfes...
You are up to date.