iiinova — where your digital self keeps evolving

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Alex Garcia

@alexgarcia.xyz

621 followers 419 following 51 posts

software engineer alexgarcia.xyz

Posts Replies Media

Alex Garcia @alexgarcia.xyz · 10/08/2026

bloop

030 3

Alex Garcia @alexgarcia.xyz · 10/08/2026

testtesttest

000 0

Alex Garcia @alexgarcia.xyz · 22/05/2026

The city of Garden Grove in CA has an active chemical emergency right now, and they posted an evacuation map that's obviously created with AI And honestly, it looks great. Can't imagine being in a time crunch to get something like this out. ggcity.org/emergency

Screenshot of the Garden Grove emergency page. Titled "Evacuation Zone - Chemical Incident" with a map showing the evacuation zone, and a list of "open evacuation centers" labled as Garden Grove Sports and REcreation Center and Cypress Community Center

010 1

Alex Garcia @alexgarcia.xyz · 12/05/2026

re the tanstack hack: It took a lot of digging but I finally found a good summary of "here's what we're doing to avoid this in the future" Also TIL about zizmor, a CLI that statically analyzes github action YAML for security vulns, with autofix support! news.ycombinator.com/item?id=4810...

We had a few revisions of the postmortem with this included, but ultimately felt premature to include given how quickly we released this notice.

That's not to say that we're not working hard on preventative work, however. We:

- [x] Temporarily removed the cache from our PNPM setup

- [x] Removed all caches from GitHub Actions

- [x] Locked down all GitHub actions on the org to commit IDs instead of version numbers

- [x] Enforced non-SMS GitHub 2FA (NPM & GitHub 2FA was already enforced, but SMS was previously allowed)

- [x] Removed all usage of `pull_request_target` from our CI pipeline (already wasn't in our CD)

- [ ] Are introducing `zizmor` as action linting to every repo via a PR check

- [ ] Are likely introducing `CODEOWNERS` on `.github` folders to restrict merging to only the 7 core maintainers

- [ ] Will replace the PNPM setup cache with `actions/cache/restore`, which has more secure defaults

- [ ] Will replace the PNPM setup cache to be isolated between release and PR envs

- [ ] May close the ability to make a TanStack PR as an external contributor (But we're absolutely not going closed source)

We'll have a follow-up blog post that outlines all of this and how maintainers are able to secure themselves simiarly.

010 1

Alex Garcia @alexgarcia.xyz · 04/03/2026

I will be at #NICAR26 this week teaching classes! For campaign finance folks: come to my Thursday 11:30am class on libfec, a new fast CLI tool for working with FEC data! Also get limited-edition libfec stickers + a campfin "zine"! (Bonus: find @simonwillison.net and I for Datasette stickers)

Assorted stickers and documents on a desk. One group of stickers says "libfec" in green font. The other group says "Datasette" in purple. One document stack has the title "NICAR26 libfec manual". The document says "libfec cheatsheet".

062 6

Alex Garcia @alexgarcia.xyz · 11/02/2026

Wow, never noticed that the SQLite docs have a sponsor message. Added in November of last year sqlite.org/cli.html

1.2. GUI Alternatives To The CLI

The sqlite3 program is written by and for the core SQLite developers and is the officially supported way to accessing SQLite database files interactively. However, some users might prefer a Graphical User Interface (GUI). Several such programs are available from third-parties. One of those is Visual DB, a sponsor of the SQLite project:

Thanks to Visual DB for helping us make SQLite better for everyone!

010 1

Alex Garcia @alexgarcia.xyz · 13/01/2026

One trick with this, using libfec + SQLite: - "Hollywood Democrats" has raised $216k in 2 years, treasurer is Benjamin Eisenberg - Has spent $88.5k (~40%) on "General Campaign Fundraising" exclusively to "Summit Campaign Strategies" - "Summit Campaign Strategies" is owned by... Benjamin Eisenberg

! libfec-dev export C00833129 -o hw-dems.db --clobber
.open hw-dems.db

Finished exporting 10 filings into hw-dems.db, in 1 second
Opened database at hw-dems.db

select sum(col_a_total_receipts)
from libfec_f3x;

sum(col_a_total_receipts)
216605.36
1 column × 1 row

select
treasurer_first_name,
treasurer_last_name,
treasurer_city,
treasurer_state
from libfec_f1;

treasurer_first_name treasurer_last_name treasurer_city treasurer_state
Benjamin Eisenberg La Canada Flintridge CA
4 columns × 1 row

select
payee_organization_name,
min(expenditure_date),
max(expenditure_date),
sum(expenditure_amount)
from libfec_schedule_b
where expenditure_purpose_descrip = 'General Campaign Consulting'
group by 1

payee_organization_name min(expenditure_date) max(expenditure_date) sum(expenditure_amount)
Summit Campaign Strategies 2023-06-12 2025-06-30 88500
4 columns × 1 row

0112 11

Alex Garcia @alexgarcia.xyz · 15/04/2025

Love this approach for seeing if ChatGPT is used in a document: See if `utm_source=chatgpt.com` appears in any URLs. Doesn't prove that ChatGPT wrote it, but at least shows they used ChatGPT when researching.

Screenshot from article that says:

A paragraph on page 29 also cites a fact to a 2024 Gothamist article, and includes the site where the source was generated: ChatGPT.

[23] https://gothamist.com/news/heres-what-nycs-mayoral-candidates-say-about-freezing-the-rent?
utm_source=chatgpt.com

140 4

Alex Garcia @alexgarcia.xyz · 27/11/2024

Please merge my +321,000 line PR, it's only a few small changes 🥺

Screenshot of a github pull request with the following contents

DRAFT: Add embedfile for all-in-one embeddings CLI tool #644
Draft
asg017 wants to merge 14 commits into Mozilla-Ocho:main from asg017:embedfile-init
+321,488 −0
Conversation 0
Commits 14
Checks 1
Files changed 24
Conversation
asg017
asg017 commented 42 minutes ago
embedfile is a CLI tool that bundles llama.cpp / llamafile, the SQLite CLI, sqlite-vec, sqlite-lembed, and a few other SQLite extensions into a comprehensive and performant tool for generating text embeddings from CSV, JSON, NDJSON, txt, or SQLite database files.

281 8

Alex Garcia @alexgarcia.xyz · 20/11/2024

metadata filtering has been merged in sqlite-vec. Release coming soon!

screenshot of a github pull request page for "Metadata filtering" ,showing a "merged" status and a 7,300 line diff.

010 1