kaelwd

What would you add to MP3 tags? ID3v2 already has separate fields for section/title/performer/conductor/composer/lyricist, it isn't the spec's fault Spotify doesn't use them.

Looks kinda like https://github.com/nuclearcodecat/shimmer

"Make all the tests pass"

"Ok, I've deleted all the failing tests"

Straight up doesn't even register clicks or keyboard focus for me in firefox.

From discord:

> There has been a ton of interest expressed this week about potential community maintenance of Gel moving forward. To help organize and channel these hopes, I'm putting out a call for volunteers to join a Gel Community Fork Working Group (...GCFWG??). We are looking for 3-5 enthusiastic, trustworthy, and competent engineers to form a working group to create a "blessed" community-maintained fork of Gel. I would be available as an advisor to the WG, on a limited basis, in the beginning.

> The goal would be to produce a fork with its own build and distribution infrastructure and a credible commitment to maintainership. If successful, we will link to the project from the old Gel repos before archiving them, and potentially make the final CLI release support upgrading to the community fork.

> Applications accepted here: https://forms.gle/GcooC6ZDTjNRen939

> I'll be reaching out to people about applications in January.

GIMP asks if I want to keep or convert the color profile but both options look washed out. The only thing that opens it "correctly" for me is MPV.

You get light grey? The headings are #101828 and body text #364153 on #0a0a0a for me.

That's only 60Hz though. Are there any dumb TVs with 120+ Hz VRR and HDR?

That's the same as regular css variables unfortunately

    padding: 1em;
    padding: var(--padding);

With no fallback value that resolves to padding: unset if the variable is not defined. The only ways I know of to work around this are style queries:

    padding: 1em;
    @container style(--padding) {
      padding: var(--padding);
    }

Or cascade layers:

    @layer base {
      padding: 1em;
    }
    @layer override {
      padding: var(--padding, revert-layer);
    }

Everyone needs to switch to pnpm and enable https://pnpm.io/settings#minimumreleaseage

Pnpm also blocks preinstall scripts by default.

Luckily that's illegal in my country, instead we have the opposite problem where new cars have LED taillights that are just as blindingly bright as their headlights.

The author of that issue has a whole video series about it: https://www.youtube.com/watch?v=hxM8QmyZXtg

A way faster terminal emulator demo: https://github.com/cmuratori/refterm

And a terminal rendering benchmark tool: https://github.com/cmuratori/termbench

California would have to split into 68 separate states to have the same representation as Wyoming.

> Can we not just have a UUID that the device generates?

They kinda are already, your phone probably uses a random MAC address for each network it connects to.

The chalk+debug+error-ex maintainer probably would have noticed a few hours later when they got home and saw a bunch of "Successfully published" emails from npm that they didn't trigger.

NPM could also flag releases that don't have a corresponding github tag (for packages that are hosted on github), most of these attacks are publishing directly to NPM without any git changes.

Versions with a serious vulnerability should be deprecated by the maintainer which then warns you to use a newer version when installing. Yes if a npm account is compromised the attacker could deprecate everything except their malicious version but it would still significantly reduce the attack surface by requiring manual intervention vs the current npm install foo@latest -> you're fucked.

It would be fine if you could still manually specify those versions eg. npm i duckdb@1.3.3 installs 1.3.3 but duckdb@latest or duckdb@^1.3 stays on 1.3.2 until 1.3.3 is ~a week old.

https://github.com/pnpm/pnpm/issues/9921

My favourite way of doing this is with edgeql

    select Movie {
      title,
      actors: {
        name,
        alsoActedIn := (
          .movies { title }
          filter .id != Movie.id
        ),
      },
    } filter .title = <str>$title;

Amazon is literally just aliexpress with faster shipping at this point.

And pewter cups and plates for thousands

The lockfile only applies when you run `npm install` in the project directory, other projects using your package will have their own lockfile and resolve your dependencies using only your package.json.

That is his opinion too, there are other posts where he strongly advocates against even the use of contraception.

This article is four years old but still relevant: https://overreacted.io/npm-audit-broken-by-design/

The vast majority of "compromised packages" are just dev dependencies that have a slow regexp.

Removing the entire package is pretty unusual, normally it's only specific compromised versions.

Yes but not there, later they get 350MB/s with the same setup.

> I put that drive an ICY BOX IB-1817M-C31 enclosure, with a maximum theoretical speed of 1000 MB/s.

Checks out, it has a 10Gb/s USB port.

The mistake is

> the USB controller of the Pi has a bandwidth of 4GB/s shared across all 4 ports

It's actually 4Gb/s = 512MB/s

REFERER moment.

Same deal with Microsoft and sfc /scannow

> If all the fuel became CO2

Methane combustion produces 2.75kg of CO2 for each kg of fuel.