Roman

My first blog post. I finally finished it. blog.rman.dev/year-in-open...

renewing the bolt open source fund for 2026. $1,700/month in new sponsorships, $11,333/month total. @bolt.new and webcontainers are built on other people's open source. here's who we fund. bolt.new/blog/bolt-op...

Thank you to our new gold sponsor, Cloudflare via Vite Ecosystem Fund! 🎉 We really appreciate it. 🙏

With highly profitable companies using AI to clean room reimplement existing projects, it’s more important than ever to support independent nonprofit open source projects like ESLint. We’ve been doing the work for 13 years. eslint.org/donate

If you run a Node.js server, start it with --permission and grant only what it needs: — No network access if it only reads files — Limit file access to the directories it actually uses Here's how I locked down Slow Reader's server: github.com/hplush/slowr...

🚀 The PWA update train continues! @vite-pwa/vitepress v2.0.0 is officially out. Bringing all the latest PWA goodness and core improvements straight to your VitePress docs. Time to upgrade! ⚡️🛠️ github.com/vite-pwa/vit...

After a few months of hard work, we're happy to announce the initial @unplugin-pwa v0.0.2 packages! We completely rearchitected the core. Just look at the diet: we went from 321 total dependencies down to just 22, cutting the install size from 43.3MB to 4.1MB. Leaner, faster, and bundler-agnostic.

In our last release, we added 49 new rules, the biggest batch in a single release since 2.0. Today, we're releasing 2.6.3, with 33 new rules across Vue, Svelte, and more, with plenty of bug fixes!

Some days you find time to contribute to @npmx.dev and get to delete 500 lines. Those are good days. (Didn't have to work hard to find them, thanks to Knip✂️ from @webpro.nl )

Spaces like @e18e.dev, where maintainers can gather, share their journeys, and collaborate, are more important than ever. Hats off to everyone who keeps making the e18e community such a special place in the ecosystem. And the same to all of you who are out there building bridges between oss projects

come on

hey! did you know we have an open collective? we do! and now it's on our @bsky.app profile, too 👉 bomb.sh/donate

Thank you @sentry.io , @syntax.fm and @opensourcepledge.com 🫶♥️

This is insane! Can't believe we're on the list 🥹 Thank you @sentry.io, @syntax.fm and YOU for the support! This is very motivating, a sign we might be onto something 😅 Rest assured we'll keep your precious handcrafted code tidy as heck, and fight AI slop in the process.

I've said it before: don't kill the goose that lays the golden eggs. If your business depends on open source, respect and support maintainers' work. Their time and goodwill aren't an unlimited resource.

tinyps 0.5.1 🚀 Added a new function to get ancestors of a process. If you use ps-tree, find-process, etc - you can consolidate them by using this package instead, and at roughly the same size or smaller

vue-data-ui v3.27.1 is now -1.5 MB lighter

Feels good 🤌 Thanks @npmx.dev for this chart

today we released a new library as part of tinylibs: tinyps ⚙️ this exposes a few utilities for dealing with system processes. you can use it to list, kill and find processes amongst other things. check it out and let us know if anything needs improving! 🙏

I’ll be logging off all socials to focus on my education. Until later!

This year I have contributed to many open source projects. If you appreciate my contributions consider sponsoring me at rman.dev/sponsor

I have been writing this post about the economics of open source, on and off, for 13 years. I wasn't expecting to end up at "Microsoft should send corporations a huge bill" but nothing else we've tried has worked. https://seldo.com/posts/nobody-pays-for-open-source-we-can-force-them-to/

GitHub having some trouble this morning it seems 👀

Great article! I don't want to think about how many hours I spent fighting derived state in Angular/VueJS/React, and SolidJS has the defaults I wanted all along. What are the little things you love about the framework/library of choice?

it does seem like pnpm is trying to keep up with the competition, but the competition only exists because it is no longer just a package manager. at this point i'm not sure what the competition is, though

Zod’s bundle size grows with each release. Valibot will always stay below 1 kB for simple schemas and below 2 kB for more complex ones.

v2.5.13 is out! Another patch with many bug fixes! biomejs.dev/internals/ch...

My sponsors page is live! github.com/sponsors/Try...

And the problem is specifically people, not tools. The tools by themselves sit there doing nothing, somebody must use them to do harm.

I remember when yarn was born. It was cool and fast and fancy. then it got more complex up to a point that users couldn't keep up. Now pnpm is the star. It is getting more complex requirements to be setup "as intended" and honestly i am worried. sigh... just random thoughts.

TIL bun has `bun run --concurrently`, so you might remove the "concurrently" package from your deps

@bomb.sh clack 1.8.0 is out 🎉 your validate() can be async now, tab completes paths in path(), and CANCEL_SYMBOL is finally exported. changelog here github.com/bombshell-de...

The latest version of vue-data-ui improves the built-in chart annotator, so you can now edit all your annotations. Annotate, save the png, send as attachment, get promoted. Repo: github.com/graphieros/v...

also @npmx.dev catching it 👀

the e18e GitHub action noticing that ESLint introduced a duplicate dependency recently 👀 always keep an eye on your deep dependency changes! this one is because a ESLint bumped a dep whose own deps include duplicates (amusingly all of those are maintained by the same person, probably an accident!)

Not sure why this isn't enabled by default, but if you are authoring a GitHub Action, turn on "Enable release immutability".

@bomb.sh/tty v0.9.0 is out! 🙌 💢 improved border defaults 🥕 hardware-driven caret rendering 💬 unicode 17 support 🧠 up to 50% memory reduction 🤏 size optimization (down to 113 kB install size) and we have a changelog now github.com/bombshell-de...

@bomb.sh/tty is the low-level layout engine and input parser that powers our forthcoming tui libraries. think we can get this even smaller, but our baseline is now v0.9.0 at 113 kB (0 deps) compared to v0.6.0 at 830 kB (0 deps) @opentui/core at 21 MB (9 deps) ink at 7.8 MB (36 deps)

I am going to frame this and put it on my wall. I shrank cloudflare-pages-deploy by 98%! That makes it a much more viable option if you're looking for a way to publish your Cloudflare Pages site programmatically.