GitHub, you are hereby absolved of all your sins. Go in peace. github.blog/changelog/20...
Philippe Serhal
Philippe Serhal
@philippeserhal.com
๐ผ Staff Engineer @netlify.com, frameworks, build system, CLI ๐จ Open source @npmx.dev, forges, gatsby. Vite team advisor.
961 followers1.4K following511 posts
Philippe Serhal reposted
talking about coherence, collaboration in the community is as strong as ever behind the noise. they're going to unlock so many paths to explore with this project. check it out and get involved ๐งก
๐โโ๏ธ what if one client worked on every forge? ๐ฃ๐ฌ๐ฏ๐ค๐ข๐ฐ is a new TypeScript library for issues, PRs, notifications, checks and webhooks across 12 forges โจ forges.link
Philippe Serhal reposted
Daniel Roe, the creator of Nuxt, and the NPMX team released a JS client that can connect to any Git forge and they were gracious enough to include Pushin! Thanks to then and their valuable feedback, Pushinโs API is now much better. Thank you, NPMX team! โค๏ธ
๐โโ๏ธ what if one client worked on every forge? ๐ฃ๐ฌ๐ฏ๐ค๐ข๐ฐ is a new TypeScript library for issues, PRs, notifications, checks and webhooks across 12 forges โจ forges.link
๐ Check out what I've been spending my evenings working on with some OSS friends! ๐ It's so exhaustive and ambitious already. ๐ญ What will you build on top of this? Does this give you ideas? What didn't seem possible before that may now be in reach?
๐โโ๏ธ what if one client worked on every forge? ๐ฃ๐ฌ๐ฏ๐ค๐ข๐ฐ is a new TypeScript library for issues, PRs, notifications, checks and webhooks across 12 forges โจ forges.link
I'm sorry to vaguepost, but there are multiple really exciting things coming to @netlify.com in the next 1-2 months. I can't wait for these launches! Ahhhhh.
Philippe Serhal reposted
I've put together a web component for embedding npm package information on your site. Ready for use on your blog or in your documentation. However, it's better than that because it does it the cool, funky, rad, fantastic @npmx.dev way. tangled.org/vale.rocks/n... #npm #npmx
github.com/withastro/ro... Composition: so hot right now
I'll be talking about how nuxt v4.6 went agnostic and shipped `nuxt/server` โฆ and `@nuxt/vite-server` ๐ can't wait to see people using some of these new APIs in the wild ๐ we have some exciting things planned as a team.
@tobbe.dev sharing the best tip of the day at @viteconf.org: "Go be someone's @patak.cat"
Philippe Serhal reposted
Since last ViteConf, @pi0.io has spent his time on @nitro.build v3: H3 rewritten on web standards, a compiled router, route rules in core. Wondering what is left before stable? Tune in for his talk "Nitro v3: the road to stable" @viteconf.org 2026, TODAY 2pm UTC. Free and online.
Philippe Serhal reposted
You can't stop maintainers getting phished. But what you can is stopping bad release reaching your lockfile! Set a minimum publish age, approve install scripts per version, let pnpm reject trust downgrades. @43081j.com in "Securing the JavaScript Ecosystem" ๐๏ธ @viteconf.org, today, 14:00 UTC
Philippe Serhal reposted
Around 70% of open source maintainers work alone or in small teams, and most are unpaid. @mirandaheath.website, Director and psychologist at the @stewardshiplab.org on the four drivers of burnout and what AI does to each. @viteconf.org 2026, 15 oct (TODAY) 2pm UTC. Free and online. viteconf.org
Philippe Serhal reposted
Did you know that @npmx.dev serves 50 million requests a month, and 300+ contributors carry its ideas out into other projects? @alexdln.com and @willow.sh split "Beyond the fast lane" between how a page feels and the tooling under it @viteconf.org 2026, Thu 15 Oct (TODAY) at 2pm UTC. Free & online
These CVEs have just been published and patched. If you have Next.js projects on @netlify.com, find out what you need to know ๐๐ผ www.netlify.com/changelog/20... (TL;DR: limited impact on Netlify, but upgrade anyway!)
An out-of-band Next.js security update is planned for Wednesday, October 14. It will address three vulnerabilities in upstream dependencies, including two critical and one high-severity issue. nextjs.org/blog/upcomi... We're also changing how we share future security notices โ
Philippe Serhal reposted
Hey look - the ViteConf schedule's out! www.viteconf.org/schedule
๐ฉ I did it: bsky.app/profile/phil.... You can blame @patak.cat.
Do we need an adapter for every framework X platform combination? According to @philippeserhal.com ( @netlify.com ) 99 lines of code can replace some of them. Learn more in his talk "Ship Where You Vite" ๐ Only at @viteconf.org 2026 Thu 15 Oct, 2pm UTC. Free and online. viteconf.org
๐โโ๏ธ A new TanStack Start project is deployed to Netlify approximately every minute(!). Congrats to the TanStack team! Of course, TanStack Start 1.0 is fully supported on @netlify.com on day one. Join hundreds of thousands of users ๐ www.netlify.com/changelog/20...
TanStack Start 1.0 is officially stable! ๐ A full-stack web framework for React and Solid, already used to build millions of apps, from Fortune 500 companies to your favorite tools and weekend projects. tanstack.com/blog/tanstac...
Philippe Serhal reposted
Philippe Serhal reposted
In three days... watch me talk about how platforms make frameworks like SvelteKit work and collaborative ecosystem efforts to make this better. (I definitely didn't spend countless hours compressing and cutting this talk until it fit. That doesn't sound like me at all. Nope.)
Three days...watch me showcasing Svelte Custom Renderers! ๐
๐ In the last month, @npmx.dev had 5M visitors, 10M page views, and handled half a billion requests. ~50x increase since April.
Last week, a legendary web dev Ryan parted ways with his project after many years. Yesterday, a legendary web dev Ryan parted ways with his project after many years. All eyes on you next week @ryansolid.bsky.social ๐.
> To our knowledge, we are the first to provide evidence based recommendations for [...] minimum release age [...] [W]e find that [...] setting the minimum release age to 8 days provides significant security benefits [...] Damn. My gut feeling that 24-48 hours was good enough was way off :(.
This Week in Package Management: 10 October 2026 nesbitt.io/2026/10/10/t...
Philippe Serhal reposted
As Deno Deploy is shutting down in 6 months, we at @netlify.com want to make sure migrating is as easy as possible if you choose us. If you're a Deno Deploy user interested in helping us vet our migration guide/tooling, please reply or DM me!
We're making the Cloudflare developer platform the best place to run JavaScript, anywhere. Big step toward that today: the Deno team is joining us to build whatโs next. https://cfl.re/4rXMBKy
If you missed it, here's a recent update regarding our investment in Netlify Edge Functions (currently running the Deno runtime): www.netlify.com/blog/edge-fu....
Philippe Serhal reposted
Only a few hours left! Nuxtathon.live -> Nuxts #2 Hackathon is about to start!
Philippe Serhal reposted
An out-of-band Next.js security update is planned for Wednesday, October 14. It will address three vulnerabilities in upstream dependencies, including two critical and one high-severity issue. nextjs.org/blog/upcomi... We're also changing how we share future security notices โ
Philippe Serhal reposted
This official @developers.google.com page is linking directly to @npmx.dev. So nice!! ๐ฏ
Philippe Serhal reposted
Netlify now runs Edge Functions on its own compute. The CPU, memory, and code size limits came from the old isolate model, and we're revisiting them now. www.netlify.com/blog/edge-fu...
Philippe Serhal reposted
Since everyone is closing PR contributions, I am inviting everyone to spam my project with your best PR slop and impossible issues, so I can test new features against AI spam. I offer the repo; you bring the tokens. It's a win-win.
Philippe Serhal reposted
I am looking for my next career opportunity! Iโm an engineering leader, consultant, author, and open-source maintainer. I've been VP of Eng, written books, get 20M weekly downloads on NPM, and more. Know of a role you think I'd be a good fit for? Book time on my cal or DM me: corbincrutchley.com
Philippe Serhal reposted
Nuxt 4.6 is out, alongside nuxt/cli v4 ๐ ๐งฉ `nuxt/server`, our first big step to a server-agnostic Nuxt ๐ฏ typed `$fetch` was rebuilt (no more TS2589!) ๐ `appSecret` + sealed cookie sessions โก๏ธ Vue Vapor support ๐ brand new dev error pages โฆ plus lots of groundwork for Nuxt 5 ๐๏ธ ๐ nuxt.com/blog/v4-6
Philippe Serhal reposted
๐ Introduce pulls.review Categorize changes in Pull Requests into logical groups, with a summary. Helps you do reviews more efficiently by focusing on what matters. Everything runs in your browser. With opt-in GitHub userscript, GitHub Actions, or CLI for local git changes!
Philippe Serhal reposted
SvelteKit 3 requires Vite 8, so builds run on Rolldown. Configuration also moves out of svelte.config.js and into vite.config.ts, which lets Vite plugins read it directly. www.netlify.com/changelog/20...
Philippe Serhal reposted
With MSW 3.0 released this week, I want to try something new to make the project financially sustainable. I wrote an open letter about the project, its history, and impact on the ecosystem. I ask for five minutes of your time to read it. Thank you. mswjs.io/sponsor
Philippe Serhal reposted
Philippe Serhal reposted
Philippe Serhal reposted
The September Next.js security release is now available. It addresses seven vulnerabilities, including one high-severity issue. Upgrade now: โฒ ~/ npm install next@16.3.8 โฒ ~/ npm install next@15.5.27 nextjs.org/blog/septem...
Another huge effort behind the scenes this year to make the @netlify.com platform faster and more reliable for everyone, while unlocking exciting future capabilities ๐. Edge Functions now run in house on Firecracker microVMs and are decoupled from Deno. Check out the technical breakdown ๐๐ผ.
Warm Edge Function invocations on Netlify now take about 5-6ms at the median, down from 25-40ms. Requests run inside our own network now at the same pricing, and your functions work exactly as written. www.netlify.com/blog/edge-fu...
Philippe Serhal reposted
Philippe Serhal reposted
I'm excited to announce MSW v3.0! ๐ฅณ - Leaner dependency graph and smaller size; - ESM-only; - Granular entrypoints; - GraphQL subscriptions; - Socket-based network interception in Node.js; - And much more! mswjs.io/blog/introd...