Scott Cooper
@scooper.bsky.social
San Francisco, typescript, xmplaylist.com
Doing frontend stuff at @sentry.io
Doing frontend stuff at @sentry.io
Pinned
Scott Cooper
@scooper.bsky.social
· Sep 17
@ctrl/tinycolor Supply Chain Attack Post-mortem
Lessons learned from becoming the unexpected face of a npm supply-chain attack.
sigh.dev
I've published my perspective of the @ctrl/tinycolor NPM supply chain attack. This whole thing got me to finally make a blog.
sigh.dev/posts/ctrl-t...
sigh.dev/posts/ctrl-t...
Reposted by Scott Cooper
The FBI has subpoenaed the domain registrar of archive.today, demanding information about the owner.
FBI Tries to Unmask Owner of Infamous Archive.is Site
The FBI has subpoenaed the domain registrar of archive.today, demanding information about the owner.
www.404media.co
November 6, 2025 at 3:24 PM
The FBI has subpoenaed the domain registrar of archive.today, demanding information about the owner.
i've never understood why people start with a monorepo. What do you mean you already have 4 package.json
October 31, 2025 at 4:11 PM
i've never understood why people start with a monorepo. What do you mean you already have 4 package.json
I feel like the "learn how to use grid" websites were always way harder than actually using grid.
October 14, 2025 at 3:35 PM
I feel like the "learn how to use grid" websites were always way harder than actually using grid.
Astro is really fun because you can just vibe code a little animation in html and add it to your blog post. sigh.dev/posts/favori...
My Favorite NPM Command
An ode to `npm repo`, the best npm command.
sigh.dev
October 11, 2025 at 10:43 PM
Astro is really fun because you can just vibe code a little animation in html and add it to your blog post. sigh.dev/posts/favori...
i want to know who made the "cheetah" model in cursor
October 8, 2025 at 12:29 AM
i want to know who made the "cheetah" model in cursor
Stop sending me this. github.blog/changelog/20...
Strengthening npm security: Important changes to authentication and token management - GitHub Changelog
As part of our ongoing commitment to securing the npm ecosystem, we’re implementing the first phase of security improvements outlined in our recent announcement. These changes will roll out over…
github.blog
September 30, 2025 at 4:34 AM
Stop sending me this. github.blog/changelog/20...
@pi0.io would love to see a new version of oftech get released. Need that bun fix. 🙈 github.com/unjs/ofetch/...
fix: mark `FormData` & `URLSearchParams` as non-serializable for bun … · unjs/ofetch@4e4d3ee
…compatibility (#483)
github.com
September 28, 2025 at 6:20 PM
@pi0.io would love to see a new version of oftech get released. Need that bun fix. 🙈 github.com/unjs/ofetch/...
Reposted by Scott Cooper
Deus Ex Remastered coming to Steam/Switch/Xbox/PS5 on Feb 5th, 2026 www.youtube.com/watch?v=z-Sg...
September 24, 2025 at 11:02 PM
Deus Ex Remastered coming to Steam/Switch/Xbox/PS5 on Feb 5th, 2026 www.youtube.com/watch?v=z-Sg...
Reposted by Scott Cooper
🚀 Announcing TanStack.com Start v1 Release Candidate!
Upgrades ↓
✨ Unified Route Tree: no more server-specific files
🔐 Type-safe middleware & server context upgrades
🛡 CSP/nonce support
⚡ Now works with any native Vite Env plugin
🌀 Zero-JS: any server handler can render!
Upgrades ↓
✨ Unified Route Tree: no more server-specific files
🔐 Type-safe middleware & server context upgrades
🛡 CSP/nonce support
⚡ Now works with any native Vite Env plugin
🌀 Zero-JS: any server handler can render!
TanStack | High Quality Open-Source Software for Web Developers
Headless, type-safe, powerful utilities for complex workflows like Data Management, Data Visualization, Charts, Tables, and UI Components.
TanStack.com
September 23, 2025 at 8:10 PM
🚀 Announcing TanStack.com Start v1 Release Candidate!
Upgrades ↓
✨ Unified Route Tree: no more server-specific files
🔐 Type-safe middleware & server context upgrades
🛡 CSP/nonce support
⚡ Now works with any native Vite Env plugin
🌀 Zero-JS: any server handler can render!
Upgrades ↓
✨ Unified Route Tree: no more server-specific files
🔐 Type-safe middleware & server context upgrades
🛡 CSP/nonce support
⚡ Now works with any native Vite Env plugin
🌀 Zero-JS: any server handler can render!
I managed my tokens so poorly that npm changed their policy. Progress! github.blog/security/sup...
Our plan for a more secure npm supply chain
GitHub is strengthening npm's security with stricter authentication, granular tokens, and enhanced trusted publishing.
github.blog
September 24, 2025 at 2:01 AM
I managed my tokens so poorly that npm changed their policy. Progress! github.blog/security/sup...
I've published my perspective of the @ctrl/tinycolor NPM supply chain attack. This whole thing got me to finally make a blog.
sigh.dev/posts/ctrl-t...
sigh.dev/posts/ctrl-t...
@ctrl/tinycolor Supply Chain Attack Post-mortem
Lessons learned from becoming the unexpected face of a npm supply-chain attack.
sigh.dev
September 17, 2025 at 4:06 PM
I've published my perspective of the @ctrl/tinycolor NPM supply chain attack. This whole thing got me to finally make a blog.
sigh.dev/posts/ctrl-t...
sigh.dev/posts/ctrl-t...
I am publishing new versions of affected packages
September 16, 2025 at 3:39 AM
I am publishing new versions of affected packages
Today's word is espoused
August 7, 2025 at 9:37 PM
Today's word is espoused
Reposted by Scott Cooper
TypeScript 5.9 is now available! 📣
This release brings:
✅ An updated tsc --init
✅ Type-checking for the new 'import defer'
✅ Actual summaries in more DOM APIs
✅ Expandable quick info hovers (✨preview✨)
and more! Read up more on our blog:
devblogs.microsoft.com/typescript/a...
This release brings:
✅ An updated tsc --init
✅ Type-checking for the new 'import defer'
✅ Actual summaries in more DOM APIs
✅ Expandable quick info hovers (✨preview✨)
and more! Read up more on our blog:
devblogs.microsoft.com/typescript/a...
Announcing TypeScript 5.9 - TypeScript
Today we are excited to announce the release of TypeScript 5.9! If you’re not familiar with TypeScript, it’s a language that builds on JavaScript by adding syntax for types. With types, TypeScript mak...
devblogs.microsoft.com
August 1, 2025 at 5:15 PM
TypeScript 5.9 is now available! 📣
This release brings:
✅ An updated tsc --init
✅ Type-checking for the new 'import defer'
✅ Actual summaries in more DOM APIs
✅ Expandable quick info hovers (✨preview✨)
and more! Read up more on our blog:
devblogs.microsoft.com/typescript/a...
This release brings:
✅ An updated tsc --init
✅ Type-checking for the new 'import defer'
✅ Actual summaries in more DOM APIs
✅ Expandable quick info hovers (✨preview✨)
and more! Read up more on our blog:
devblogs.microsoft.com/typescript/a...
Reposted by Scott Cooper
You will review my vibe code until exhaustion
June 3, 2025 at 3:18 AM
You will review my vibe code until exhaustion
Reposted by Scott Cooper
We wrote a blog sharing some findings from our binary size optimization journey - exploring efficient ways to embed large string HashMaps statically in programs: github.com/orgs/web-inf...
July 7, 2025 at 1:34 PM
We wrote a blog sharing some findings from our binary size optimization journey - exploring efficient ways to embed large string HashMaps statically in programs: github.com/orgs/web-inf...
really enjoying the film list stuff @nytimes.com is doing this week.
The Best Movies of the 21st Century: How Actors, Directors and Other Film Lovers Voted
To determine the best movies of the 21st century, we polled hundreds of celebrities. See how your favorite stars and directors voted.
www.nytimes.com
June 27, 2025 at 5:16 AM
really enjoying the film list stuff @nytimes.com is doing this week.
Reposted by Scott Cooper
they should make a rotisserie chicken you can vape
June 26, 2025 at 12:08 AM
they should make a rotisserie chicken you can vape
Reposted by Scott Cooper
I've been no-alcohol & no-snacking for a week now and boy howdy are days long and boring.
June 25, 2025 at 5:01 AM
I've been no-alcohol & no-snacking for a week now and boy howdy are days long and boring.
Reposted by Scott Cooper
All this civil unrest better not fuck up Toyota-Thon.
June 10, 2025 at 3:47 PM
All this civil unrest better not fuck up Toyota-Thon.
I don’t know who convinced everyone that hideous new balance shoes that dads would wear in the 90s are good. Middle aged men everywhere should embrace this trend while they can. www.tiktok.com/t/ZP8MspqsP/
Top 6 New Balance Sneakers for 2025. Which pair you going with? Shop these using the link in my bio! @New Balance @StockX #newbalance #stockx #streetwear #howtostyle #springoutfit #grwm #mensfashio...
TikTok video by Nate Thompson
www.tiktok.com
June 8, 2025 at 1:20 AM
I don’t know who convinced everyone that hideous new balance shoes that dads would wear in the 90s are good. Middle aged men everywhere should embrace this trend while they can. www.tiktok.com/t/ZP8MspqsP/
has trump purged his instagram feed of pictures of elon
June 6, 2025 at 4:31 PM
has trump purged his instagram feed of pictures of elon
The reaction to the fly AI blog has mostly been people that seem to not use these tools, so they really have nothing to say about them outside of training bad, energy bad, users are dumber than me and beneath me.
"Juxtapose this with my aforementioned psychological motivations, to wit" okay dude
"Juxtapose this with my aforementioned psychological motivations, to wit" okay dude
I Think I’m Done Thinking About genAI For Now
The conversation isn’t over, but I don’t think I have much to add to it.
blog.glyph.im
June 5, 2025 at 4:16 PM
The reaction to the fly AI blog has mostly been people that seem to not use these tools, so they really have nothing to say about them outside of training bad, energy bad, users are dumber than me and beneath me.
"Juxtapose this with my aforementioned psychological motivations, to wit" okay dude
"Juxtapose this with my aforementioned psychological motivations, to wit" okay dude
You will review my vibe code until exhaustion
June 3, 2025 at 3:18 AM
You will review my vibe code until exhaustion
i feel bad for the people that didn't want to use a vscode based editor and are now missing out. This also means they probably didn't want to write typescript and for that they must suffer
June 3, 2025 at 3:17 AM
i feel bad for the people that didn't want to use a vscode based editor and are now missing out. This also means they probably didn't want to write typescript and for that they must suffer