Nicolas Dubien

@sentry.io is a real one for this! $1M to open source maintainers this year 🙏🎉 for many years, Sentry was the only company using my software to actually donate to me. if nothing else, it was a big reason i decided to join the team! blog.sentry.io/another-year...

🥴 I feel AI slop forks are somehow gonna hit open source spirit the hard way

How it started ... how it’s going I just can’t do this anymore 😔

This is my take on AI contribution policy: it is not a layer of your workflow I need to know about, and you need to be engaged enough to fool me.

🫣 Short trailer for v5? Let's have a sneak peek at the upcoming next major version of fast-check!

📝 The release note for fast-check 4.10.0 is out! In this version: 🔌 Plugin API preview, 🔌 7 built-in plugins, 🗑️ Deprecation notices to help you prepare for v5! More at: fast-check.dev/blog/2026/09...

🚀 New release! Version 4.10.0 is out. 🫣 Get prepared for the upcoming v5.

🙃 Sadly we cannot approve a staged publishing while the automatic review is pending. It would be great to be capable of approving while npm waits for both the maintainer and the automatic approvals fast-check 4.10.0 coming soon!

Good stuff being said by @nicr.dev 🙏

React 19.3 is now available! This release makes View Transitions and Fragment Refs stable, and adds browser(), Trusted Types support, and Context in Server Components. react.dev/blog/2026/09...

Vitest 5 is here! 🎉 - Big performance improvements (vm pools up to 53% faster, ~18% boost across the board including Browser Mode) - New builtin Trace View in Browser Mode - Nested projects support - New benchmarking API - New `vi.when` API - Better defaults - And a lot of bug fixes!

This Week In React 295 ⚛️ - StyleX - browser() - Next.js - Compiler in Vite/Bun - Astryx - Formisch - React Aria - TanStack 📱 - C++ API - Margelo+Callstack - Observe - Reanimated - Teleport - Nitro - Screen Transition 🍿 Read thisweekinreact.com/newsletter/295 ✍️ @jwr.ski & I

So many tech companies are setting on fire the little trust they had with our communities. They're heavily underestimating the consequences of their actions. The long term network effects among folks who care will be much larger than they expect.

GitHub doesn't show how many projects use your GitHub Action or GitHub App, so I wrote a custom script to retrieve that information for AgentScan. I didn't expect this many projects ❤️ I'm stoked on one end and sad on the other for the mess AI spam is causing. Stay positive 💪

When I saw this yesterday(since been fixed). I thought it was piling on the recent Cursor reveal. But then I realized these docs are from April. It's not a conspiracy. It's something worse, because there's no one to argue with. Nobody Argued For Your Stack: dev.to/playfulprogr...

🔌 Plugin capabilities coming soon in fast-check. We are currently crafting our first few plugins to confirm the API 🤞 fast-check.dev/docs/core-bl...

For those looking for more details after the release announcement here they are. Solid's approach to Async is one of kind. And more than that it has real implications. www.solidjs.com/blog/async-s...

My current usage of AI is all about naming. I mostly use it to brainstorm on the names used by APIs or to clarify jsdoc and documentation. I less and less use it for code 😅 Notably for @fast-check.dev and at work

I'm p confident a lot of people will resonate with this brettcodes.com/im-done-usin... We need more perspectives from people with lots of experience as developers!

😘 Seen in the wild while scanning the web for references to @fast-check.dev. Pretty amazed to see it quoted in the official documentation of @vitest.dev 😍

Rust announced their LLM policy. I suggest everyone to give it a read. Objectively, it's well written, and it explains plainly their decision. It fits the project. blog.rust-lang.org/inside-rust/...

🚀 Release note for fast-check 4.9.0 is out. It's all about performance and rewriting of `entityGraph`. More at: fast-check.dev/blog/2026/07...

🥵 On this period of hot weather, I had the bad idea to compute the CO2 emission per $1 of Claude... $1 ≈ 1kg of CO2 on decarbonized electricity like France and 30kg for bad ones. It easily leads to tons in a year window. Guess what allowance per human is 2 tons a year for +2°C 🫠

🫠 Does anyone know if the OSS program of @anthropic.com will be renewed? Not using my credits as much as I could but Claude is still an interesting ally for OSS projects to pinpoint or suggest things that the maintainer can then include (or not). If only they renew it 🙏

pnpm 11.10 adds a new _auth setting that ties each registry credential to its host, so a malicious or compromised repo file can't redirect your token to a different server. The release also hardens pnpm deploy, pack-app, and more. socket.dev/blog/pnpm-11...

@nicolas.dubien.me has been verified by @npmx.dev on the mu.social app

Talk submitted to discuss about @fast-check.dev 🤞 I was not sure of the proposed title, I was in between two titles. Maybe I'll re-submit with the other title just in case one is more catch-y than the other 🤔

Time to spend some time on my property based skills for @fast-check.dev 😅

got frustrated recently at work about people writing using AI instead of using their brains! here's my take on it: sophiebits.com/2026/06/25/t...

🤞 Hope to see many of you at "Beyond testing and type checking JavaScript: Can we be bothered?" github.com/Igalia/weben...

I'll discuss a little bit about Property Based Testing and @fast-check.dev during the breakout sessions of @webengineshackfest.org (remotely for me)

dependents.dev

Staged publishing TL;DR 1. You replace `npm publish` with `npm stage publish` 2. It puts the tarball in a staging area for review 3. You approve it via the CLI or web It will land in npm@^11.15.0. I've already turned off non-staged publishing in @nuqs.dev (in the Trusted Publishing settings).

Woooo yeaaah! The missing piece 🎉 everything is about to get a lot more secure

In the next version of pnpm you'll be able to run the Rust engine for fetching, importing, and linking packages.

I made a graph visualizer for specifically analyzing (and eventually visual refactoring (hopefully)) Shows cycles, filtering, handles 60k nodes / 100k edges reasonable rendered with WebGL2 hope someone finds it useful <3

Heartbreaking. And a wake-up call. It is no longer about being difficult to find a way to sustain yourself through your work online. It is no longer sustainable to keep a website up now. Axel has done so much for the web and all of us. Buy one of his books if you can. We've learned so much from him.

Your Gmail isn't free. You’re worth between $30 and $180,000, it just depends how valuable advertisers think you are. Read more, based on our analysis featured in Forbes: https://www.forbes.com/sites/zakdoffman/2026/04/28/price-of-free-gmail-how-much-your-google-account-is-worth/

🏁 TeamPCP and BreachForums are running a supply chain attack contest: $1,000 in Monero for the biggest haul of compromised open source packages, measured by download counts. The group open sourced Shai-Hulud as attack tooling and requires it for entry. socket.dev/blog/teampcp...

This is awesome!! Check out @vlt.sh for this in the JS ecosystem. www.vlt.io/products/rep...

If only we could combo otp/2fa with trusted publishing on @npmjs.bsky.social 😞 It would be great to be capable of having both enforced to strengthen publishing pipelines 💪