Karl Horky @karlhorky.com · 26/08/2026introducing the `code-comments` skill: clearer, more deterministic code comments why: AI mostly writes in horrible, unclear, twisted ways (esp Claude) and that slop is saved in your codebase code comments, w. human + AI comprehension costs npx skills add karlhorky/agent-skills 220
Karl Horky @karlhorky.com · 20/08/2026@philippeserhal.com would @netlify.com switch off Corepack for pnpm now that it's officially recommended against? x.com/karlhorky/st...x.comKarl Horky (@karlhorky) on XOfficial recommendation from the pnpm team to avoid Corepack 220
Karl Horky @karlhorky.com · 19/08/2026still trying to get Claude Code (Opus 5, but all Anthropic models are like this) to be more grounded in reality and less persuasive / rhetoric-heavy the responses are by default so unstructured and void of proof / verification push a little bit against the rhetoric and "You're absolutely right!" 131
Karl Horky @karlhorky.com · 18/08/2026TypeScript overlays in MDX files 😍 Using TS 7.x Content Mappers by @andrewbran.ch 🙌 0180
Karl Horky @karlhorky.com · 12/08/2026ahh @github.com is removing "Close" notifications?? 😬 notifications are already bad enough, making them worse? submit your feedback here: github.com/orgs/communi... 300
Karl Horky @karlhorky.com · 12/08/2026new proof of concept script: diagnostics from Next.js TypeScript language service plugin on the command line 😍 (also in CI) like `astro check` or `vue-tsc` or `mdx-tsc` 220
Karl Horky @karlhorky.com · 10/08/2026another of my weird code review habits check PR changes (even for your PRs) - if not self-explanatory in PR context, make line comments on what/why benefits: 1. finds many logic errors + overengineering 2. returning to PRs later offers extra context both for AI and people 110
Karl Horky @karlhorky.com · 07/08/2026that kind of day ... where a React key warning in your app leads you to discover a bug in React 🤯 github.com/react/react/... 020
Karl Horky @karlhorky.com · 07/08/2026Even with all of these new code review tools lately, we still have diffs like this on GitHub (even SemanticDiff can't ignore the {' '} diff) Wonder if these belong in Git as semantic diff drivers per language/framework 👀 so diffs everywhere can ignore these 🤔 450
Karl Horky @karlhorky.com · 05/08/2026Naming is hard So try to avoid naming things as much as possible - use existing names, from the language, framework, external APIs, etc One of my latest additions to AGENTS . md github.com/karlhorky/do... 000
Karl Horky @karlhorky.com · 30/07/2026Lightweight AI planning (avoiding a "plan" or "spec" which easily gets out of date): Start PRs with an empty commit + include all of the planned tasks in PR title and description (using checkboxes) Then keep this up to date and check off the points as you / AI implement github.com/karlhorky/do... 231
Reposted by Karl HorkyTypeScript @typescriptlang.org · 08/07/2026📣 The moment is here. 📣 TypeScript 7 is officially released! 7️⃣ devblogs.microsoft.com/typescript/a...devblogs.microsoft.comAnnouncing TypeScript 7.0 - TypeScriptToday we are proud to announce the availability of TypeScript 7, a 10x faster native port of TypeScript! Since its early days, TypeScript has promised to 15617156
Reposted by Karl HorkyNode.js @nodejs.org · 18/06/2026⚠️ Updates are now available for the 26.x, 24.x, 22.x Node.js release lines for the following issues. More information here: nodejs.org/en/blog/vulnerability/ju…nodejs.orgNode.js — Thursday, June 18, 2026 Security ReleasesNode.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts. 03710
Karl Horky @karlhorky.com · 17/06/2026Security: VS Code 1.125 finally has a delay for auto-updates of extensions 👍 // Delay extension updates for 7 days "extensions.autoUpdateDelay": 168, Prompted by the recent security breaches and over 300 upvotes on my feature suggestion code.visualstudio.com/updates/v1_1... 111
Karl Horky @karlhorky.com · 17/06/2026Had a great time MCing at @jsnation.gitnation.org 2026 in Amsterdam! Great to see all the friends and make new connections Thanks to the organizers at @gitnation.bsky.social , and everyone else who helped organize, spoke and otherwise joined the event! #JSNation 100
Reposted by Karl HorkyVite @vite.dev · 04/06/2026Today, VoidZero joins Cloudflare. Vite remains MIT, vendor-neutral, and stewarded by the same wider team. The same goes for Vitest, Rolldown, and Oxc. Cloudflare is also committing $1M to an OSS fund to support independent development in the Vite ecosystem.vite.devCloudflare supports Vite's missionThe VoidZero team is joining Cloudflare. Vite remains MIT, vendor-neutral and stewarded by the same wider team. 521238
Karl Horky @karlhorky.com · 02/06/2026Looking forward to MCing at JSNation Conf 2026 in Amsterdam next week 🚀 As a preview, here's multiple badly-generated AI photos of me on stage, which don't look like me at all hint: I like talking about AI slop / AI fails ✨ and how we can do better See you all there! 120
Reposted by Karl HorkyJiahan Chen @chenjiahan.bsky.social · 26/05/2026Do you know that using GitHub CLI (gh) may expose you to supply-chain attacks? It stores a long-lived GitHub token on your machine, which can be stolen by any malicious scripts. This is what happened in the recent Nx supply-chain compromise, which led to GitHub’s source code being leaked. 2347
Karl Horky @karlhorky.com · 19/05/2026Come and join us at Jetbrains for the next AmsterdamJS, with some TC39 members 🙌 080
Karl Horky @karlhorky.com · 17/05/2026VS Code extension Security: I proposed a setting in VS Code to limit extension installs to versions older than X days This is to mitigate supply chain attacks, similar to pnpm's minimumReleaseAge github.com/microsoft/vs... 1291
Karl Horky @karlhorky.com · 27/04/2026Great research into the changing team dynamics of AI, and how a lot of tools and processes are built for: 1. slow, pre-AI ways of collaboration 2. multiplying singular AI users and siloing the AI interactions, instead of making it team-first 040
Karl Horky @karlhorky.com · 16/04/2026VS Code: I suggested an "edit mode" for the integrated browser, for WYSWYG-style workflows of changing text copy If you also want this: it is a backlog candidate now, needs 20 👍 reactions to move it to backlog github.com/microsoft/vs... 140
Karl Horky @karlhorky.com · 06/04/2026Tomorrow: React Amsterdam ⚛️ April edition, at Picnic - Kirill Voloshin and Masoud Alali: Evolving the Picnic Page Platform with React Server Components - Leon Liefting: Building Flexible Breadcrumbs in Next.js With the App Router Hope to see you there! guild.host/events/react...guild.hostReact Amsterdam Meetup: React Server Components & more! | GuildApr 7th 6:30PM: Hey, React Amsterdam Community! We’re excited to kick off our next React meetup on April 7! Join us for an evening of practical insights, great conversations, and community vibes — fr... 020
Karl Horky @karlhorky.com · 31/03/2026The axios breach is a good opportunity to review your package manager settings I recommend pnpm @pnpm.io Default: postinstall scripts are blocked, protects against axios vector Also try: - minimumReleaseAge: 10080 (pkgs must be min 7 days old) - trustPolicy - blockExoticSubdeps 3100
Karl Horky @karlhorky.com · 21/01/2026Feb 5: Come and join our next React Amsterdam meetup 🚀 at Albert Heijn's AH Technology office in Zandaam Talks: - Releasing 20 Micro-Frontends in 1 Week With Module Federation by Gonzalo Beviglia - The Design System Journey by Gabriel Cardoso guild.host/events/react...guild.hostReact Amsterdam Meetup: The Design System Journey & more! | GuildFeb 5th 6:00PM: Hey, React Amsterdam Community! We’re kicking off 2026 with our first meetup on February 5. Join us to explore how to scale 010
Karl Horky @karlhorky.com · 13/01/2026🔒Node.js v22.22.0, v24.13.0, v25.3.0 fix 3 high, 4 med, 1 low severity security vulnerabilities (+ dependencies) Upgrade now: Windows: choco upgrade nodejs # or nodejs-lts macOS: brew upgrade node # or node@24 Ubuntu: sudo apt-get --only-upgrade install nodejs 220
Karl Horky @karlhorky.com · 05/12/2025pnpm 10.21 continues to add security features 🛡️ trustPolicy: 'no-downgrade' fails install if trust level of a package decreases with a new version 030
Karl Horky @karlhorky.com · 29/11/2025Petition in Germany recognizing open source as volunteering for the common good 🤩 Seems like a good step towards recognition and a healthier open source ecosystem www.openpetition.de/petition/onl... 0184
Karl Horky @karlhorky.com · 19/11/2025Wow, no more cookie banners in EU? 🤯🚀 Yes please! > some “non-risk” cookies won’t trigger pop-ups at all > central browser controls that apply to websites broadly [for other cookies] www.theverge.com/news/823750/...theverge.comEurope is scaling back its landmark privacy and AI lawsThe EU folds under Big Tech’s pressure. 121
Karl Horky @karlhorky.com · 18/11/2025Ohh, interesting opportunity to be the Head of the Sovereign Tech Fund in Berlin 👀 021
Karl Horky @karlhorky.com · 22/10/2025Security: Do not install OpenAI Atlas, Perplexity Comet, etc At least until the security implications are more fully understood Multiple security research firms have found vulnerabilities in AI browser architecture, not restricted to only one specific browser brave.com/blog/unseeab...brave.comUnseeable prompt injections in screenshots: more vulnerabilities in Comet and other AI browsers | BraveAI browsers remain vulnerable to prompt injection attacks via screenshots and hidden content, allowing attackers to exploit users' authenticated sessions. 000
Karl Horky @karlhorky.com · 16/10/2025npx-safe by @rafaelgss.dev : Use the Node.js permissions model to make running npx on untrusted packages safer 🔥 github.com/RafaelGSS/do... 010
Reposted by Karl HorkyRafael Gonzaga | Node.js @rafaelgss.dev · 15/10/2025Node.js 25 is here! We have upgraded V8 to 14.1, bringing major JSON.stringify performance improvements and JIT pipeline optimizations. This release introduces the permission model --allow-net, Web Storage is enabled by default, and more! nodejs.org/en/blog/rele...nodejs.orgNode.jsNode.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts. 09523
Karl Horky @karlhorky.com · 10/10/2025Ahh version control conflicts are a great use case for AI - conflicts can be super hairy, so any tools or context that can help with this is 🔥🔥 130
Reposted by Karl HorkyFrançois Best @francoisbest.com · 18/07/2025A phishing attack is going on against maintainers on @npmjs.bsky.social, be aware! - email is spoofed from npmjs.org (which doesn’t use DMARC but redirects to npmjs.com) - login link points to npnjs(dot)com (clear giveaway) 47342
Karl Horky @karlhorky.com · 25/09/2025My request for Dependabot: Full support for @pnpm.io (updates to transitive deps fail currently) Voice support in the issue 🙌 github.com/dependabot/d... 140
Reposted by Karl HorkyJen Simmons @jensimmons.bsky.social · 15/09/2025Safari 26 is here!!! Anchor Positioning, Scroll-driven animations, High Dynamic Range images, the new HTML <model> element, the all-new Digital Credentials API, SVG icon support, WebGPU, WebKit in SwiftUI, every site can be a web app on iOS and iPadOS, and much more. webkit.org/blog/17333/w...webkit.orgWebKit Features in Safari 26.0We’re happy to share with you what’s arriving in Safari 26.0! 714030
Karl Horky @karlhorky.com · 04/09/2025React Advanced meetup coming Toronto 🇨🇦 Any speakers interested: apply to the CFP at the link below 🙌 000
Karl Horky @karlhorky.com · 30/08/2025Codemods for Node.js 😍 Looking great, thanks to all contributors! 1111
Karl Horky @karlhorky.com · 11/08/2025@netlify.com multiple users reporting Netlify edge functions being down, in case you didn't know yet Maybe you can update the status page with the outage? answers.netlify.com/t/the-site-s... 110
Karl Horky @karlhorky.com · 09/08/2025VS Code 1.103 (Jul 2025) finally has expandable hovers in JavaScript and TypeScript 😍 for when the hover info is showing the type name instead of the object / array / etc code.visualstudio.com/updates/v1_1... 3294
Reposted by Karl HorkyGitHub @github.com · 05/08/2025Is more funding possible for open source maintainers in Europe? 🇪🇺 A new study commissioned by GitHub explores why creating an EU Sovereign Tech Fund could provide sustainable resources for critical OS projects. Learn how you can help make it a reality.👇 github.blog/open-source/...github.blogWe need a European Sovereign Tech FundWith a new feasibility study, GitHub’s developer policy team is building a coalition of policymakers and industry to close the maintenance funding gap. 15011
Reposted by Karl Horkymikkelam.com @mikkelam.com · 07/07/2025I made an emoji picker for Mac! Fun,but also rather frustrating experience 🙃 Swift was my third choice after 2 attempts with rust GUIs github.com/mikkelam/Emo...github.comGitHub - mikkelam/Emoji-Ninja: Fast emoji picker🥷💨Fast emoji picker🥷💨. Contribute to mikkelam/Emoji-Ninja development by creating an account on GitHub. 021
Karl Horky @karlhorky.com · 18/07/2025@bengubler.com Welcome to Bluesky! 🎉 Thanks for your work on the new `experimental.typedRoutes` Next.js Turbopack feature! bsky.app/profile/did:... 040
Karl Horky @karlhorky.com · 17/07/2025Looks like `experimental.typedRoutes` is coming to Next.js Turbopack, thanks to Ben Gubler 🚀 🎉 github.com/vercel/next.... 080
Reposted by Karl HorkyJhey ʕ·ᴥ· ʔ @jhey.dev · 08/07/2025SVG filters provide a basic lighting system you can sync with a little JavaScript and use in your web apps 💡 ... not as powerful as MacOS implementation but pretty cool 1353348
Reposted by Karl HorkyReact @react.dev · 22/04/2025React Compiler RC is now available! We've added support for swc and are working towards a stable release react.dev/blog/2025/04...react.devReact Compiler RC – ReactThe library for web and native user interfaces 010625
Reposted by Karl HorkyIgalia @igalia.com · 22/05/2025With the next TC39 plenary less than a week away, Igalia’s Compilers team has just dropped a thorough blog post recapping April’s session. It walks through the standout proposals and discussions that will help steer JavaScript’s evolution in the months ahead. blogs.igalia.com/compilers/20...blogs.igalia.comSummary of the April 2025 TC39 plenaryA summary of the most exciting updates from the TC39 meeting held in April 2025 1198
Karl Horky @karlhorky.com · 21/05/2025My work in open source, from fixing papercuts to support students to discussing standards 🚀 Thanks so much to the Open Source Initiative @opensource.org for featuring me as a maintainer for Maintainer Month 2025! opensource.org/maintainers/... 1151
Reposted by Karl HorkyJeff Lindsay @progrium.bsky.social · 07/05/2025What if you took the core abstractions of Plan 9 from Bell Labs and put them in a WebAssembly module? progrium.xyz/blog/2025/sp...progrium.xyzThe Spirit of Plan 9 on the WebHomepage and blog of hacker/builder Jeff Lindsay, aka progrium 095