sukka
banner
skk.moe
sukka
@skk.moe
zh-CN & en-US / Gen Z / http://git.io/sukkaw / http://skk.moe / https://blog.skk.moe / Vibe Code Cleanup Specialist / Senior FE dev / Contributing to OSS and creating PRs for fun / All opinions are my own, literally all of them.
As I said, @pypi.org already supports setting up a trusted publisher while creating a new package. It demonstrates it is doable.

The real problem is why @npmjs.bsky.social / @github.com not implementing the same.
October 3, 2025 at 9:24 AM
But what happens if you opt in for a package because of its needs, and then it gets compromised after you trusted it?
September 7, 2025 at 1:35 PM
v8.dev/blog/spread-...
I am pretty sure this is "against" spec anyway.
Speeding up spread elements · V8
V8 v7.2 / significantly speeds up Array.from(array) as well as [...spread] for arrays, strings, sets, and maps.
v8.dev
January 24, 2025 at 5:23 AM
I don't care about ops or percent. As long as destructure is consistently slower, it is slower.

It makes sense why array index access is way faster: destructure requires extra overhead from the iterator protocol, while array index access doesn't.
January 22, 2025 at 1:17 AM
拷打 v8 没用,而 SpiderMonkey 早就摆烂了。所以只能拷打 React Compiler 了。
January 21, 2025 at 1:08 PM