Filip Sobol

Sonda v0.8 is here, and it's the biggest release to date. It introduces a new UI that makes it easier to inspect and visualize large projects. It also displays more information about assets, inputs, external dependencies, and import relationships. Demo and details below 👇

⚠️ Already saw two cases today where newly created GitHub accounts posted comments with a ZIP file claiming to contain a fix for the reported issue. In both cases, the ZIP contained malware. **Remember to check issue comments before letting AI agents loose on them.**

Just released sonda v0.13.0. It still has only 2 direct dependencies, but I replaced `open` with `tiny-open` by @fabiospampinato.bsky.social, which brought the total dependency count down from 17 to 6. Nice little dependency cleanup.

Chrome shipped an LLM Prompt API to the web platform. At Mozilla, we oppose this API. Here's why:

🚀Rolldown 1.0 is here!🚀 Rust-based high-performance JavaScript bundler. 🏎️ Runs at native speed that’s up 30x faster than Rollup 🤝 Compatible with existing Rollup & Vite plugins ⚡The underlying bunder for Vite After 2 years, Rolldown is officially stable and has 20+M weekly downloads.

CSS nesting is now Baseline 🎉 Write nested selectors directly in CSS — just like Sass, but natively. .card { color: black; &:hover { color: blue; } .title { font-weight: bold; } } No preprocessor needed. Learn more 👇 developer.mozilla.org/en-US/docs/...

Some thoughts about AI-assisted coding and how it affects my brain. I'm more productive and more exhausted at the same time. marvinh.dev/blog/ddosing...

Some recent Rspack benchmark trends. Rspack 2.0 work is helping improve performance steadily⚡️

TypeScript 6.0 is now available! This release brings better type-checking for methods, new standard library features, new module features for Node.js, and more! But most important, this release brings us one step closer to the upcoming native-speed 7.0! devblogs.microsoft.com/typescript/a...

new post on my personal blog. i think these three areas often go unexplained, so hopefully this explains why some of these packages exist. these are fine to exist but the majority of developers shouldn't have to pay the cost for them.

Recently added a connection diagram view to Sonda 👀 It complements the treemap view and makes it much easier to see how bundles and source files connect. Also, you can now upload JSON reports and get an instant HTML report: sonda.dev/demo

Vitest 4.1 is out! 🚀 ✅ Vite 8 support from day 1 🏷️ Test tags to organize, filter & apply shared options 🪝 New hooks for easier tracing, transactions and AsyncLocalStorage 🔍 Async leak detection 🤖 Agent reporter to reduce token usage And much more! Full blog post at vitest.dev/blog/vitest-...

⚡️ Vite 8.0 is here! The most significant architectural change since Vite 2. ⏬ Powered by @rolldown.rs bringing faster production builds and more consistency 🛤️ New features such as tsconfig paths and emitDecoratorMetadata support vite.dev/blog/announc...

Node.js is moving to one major release per year starting with Node 27! 🚀 ✅ Simpler: Every release becomes LTS. ✅ Predictable: Version numbers now align with the year. ✅ New: A 6-month Alpha channel for early testing. https://bit.ly/4rnosLg

Happy Monday CSS gang. Let's improve CSS minifiers! Here's a suite of 350 minifier tests I've written that show there's lots of opportunities for minifiers to do better: www.keithcirkel.co.uk/css-minify-t... I know you all can help add 350 more, so come contribute! github.com/keithamus/cs...

🙋‍♂️ I _could not be more thrilled_ this isn't a zero-sum game we're here to make the web better for everyone, and this is a win 🔥 props to @npmjs.bsky.social 🙏

Well, well, well... look who suddenly remembered they can ship new features. Right after the community started working on an alternative. What a coincidence! 🙃

TypeScript 6.0 beta is now published! This release brings - inference improvements for functions - updates to package.json 'imports' - the Temporal APIs - alignments for the upcoming TypeScript 7.0 - & more! Try it today! devblogs.microsoft.com/typescript/a...

In Firefox 147, you no longer need heavy libraries to (de)compress brotli with JS - you can just use CompressionStream and DecompressionStream!

@vuejs.org 3.6 beta is out with Vapor Mode! github.com/vuejs/core/r...

I made something new: an eslint plugin to validate your npm ecosystem lockfiles! It supports npm, pnpm, yarn, bun, and vlt, and it's already helped find a supply chain security attack vector inside a fortune 500 tech company. www.npmjs.com/package/esli...

Want to understand why some of your @vitest.dev tests are slower than expected? Then you can use the built-in experimental @opentelemetry.io support to figure out what makes tests slow and how much time is spent on each part of it. 📈

⚔️introducing TypeSlayer⚔️ A #typescript type performance benchmarking and analysis tool. A summation of everything learned from the benchmarking required to make the Doom project happen. It's got MCP support, Perfetto, Speedscope, Treemap, duplicate package detection, and more.

We've got some updates on TypeScript 7! The new native port - can type-check any project - supports --build and --incremental - has rich editor features implemented - is still 10x faster and is ready for you to try today! devblogs.microsoft.com/typescript/p...

I actually love this disclaimer

The glob library on npm currently has a CVE. It's entirely predictable since it has 26 dependencies. If you're getting a security warning from glob it's a good time to see if you can switch to a lighter dependency such as tinyglobby or Node's built-in glob functionality: nodejs.org/api/fs.html#...

tinyglobby is a great success, and has shown us how much we can improve perf for everyone. here's some of the story! big thanks to @superchupu.dev and @benmccann.com for putting so much work into this and the migrations/adoption. we're lucky to have both in the @e18e.dev community 💙

View transitions are in every browser now ✨

We all dodged a bullet https://xeiaso.net/notes/2025/we-dodged-a-bullet/

second: devs tend to fixate on repetitiveness as a sign of poor code quality. but the cure is often worse than the disease, because if unchecked it leads to the thing that, in my experience, really _is_ a sign of poor code quality: indirection. when you're writing code, indirection is your nemesis.

some thoughts about the bloat introduced by edge-case first libraries

Great benchmark! We're continuously optimizing Rspack for faster builds and smaller bundle sizes. It's worth noting that webpack/Rspack produce larger bundles in this case due to different handling of dynamic require() in moment.js, see github.com/filipsobol/b...

The Register wrote a story about a single maintainer open source project, I think it's shameful and upsetting So I wrote a blog post about it An absolutely ridiculous amount of open source is one person projects. I have the data to prove it opensourcesecurity.io/2025/08-oss-...

Multithreaded linting just landed in ESLint! eslint.org/blog/2025/08...

oxlint + tsgolint = no slow down! no-floating-promises completes 4.4k files in 3.2 seconds, in the vscode repo. typescript-go is the future, all credits to the ts-go team! We just glued everything together 😀 github.com/microsoft/ty...

Oxlint is making a huge step forward! Two new updates: JS custom rules, with ESLint compatible API are on the way. The first prototype gives a good speedup already! 🔥 Type-aware rules. Full coverage no-floating-promise through tsgolint, integrated like the other oxlint rules and extremely fast.

When @eslint.org added official support for Markdown files, I figured it could be perfect for validating changeset files. It fits the use case really well.

Big week for Sonda. After 6 months of work, v0.8 is finally out. v0.8.1 and v0.8.2 followed with QoL improvements and minor bug fixes. This week, it also hit 500+ GitHub stars and 20K weekly downloads on npm. Feels like v1.0 is getting close.

I declined a $1,000/month ESLint sponsorship from a pay-for-follows company. That's not the type of sponsor we want. It's frustrating that these types of companies (as well as online casinos) are more willing to sponsor ESLint than tech companies where ESLint is used.

I wrote an article about how we cut CKEditor’s bundle size by 40% by improving tree-shaking. It covers the tools and processes we used, how we measured improvements and caught regressions, along with techniques you can apply in your own libraries. ckeditor.com/blog/how-we-...

So close to 500 stars... github.com/filipsobol/s...

Production bundle quality matters. In Rspack 1.4, we collaborated with SWC to improve dead code elimination. For example, Rspack and SWC can now produce the smallest bundle for react-router-dom.