Sign in

Maël Nison

@mael.dev
1K followers 149 following 311 posts

Arcanis on GitHub. Lead maintainer for @yarnpkg.dev 🧶 Staff DevX Mistral AI 🇪🇺 previously: Datadog, Meta, Sketchfab My life: my wife, two sons, two cats, and far too many side projects 📦

PostsRepliesMedia
Maël Nison @mael.dev · 19/08/2026
We have some support in 6.x for node.js and python releases. I'd like to eventually have support for arbitrary tools, if you have ideas I'd love to review!
111
Reposted by Maël Nison
Simon Boudrias @sboudrias.bsky.social · 04/08/2026
We deleted a year of AI context files—and our evals got better. On The AI Native Dev podcast, I share what changed as Datadog scaled AI coding tools to 1,000+ engineers. tessl.co/sb6 #AIagents #DevEx
011
Maël Nison @mael.dev · 26/06/2026
Heard Weird Al forbids people to stand
100
Reposted by Maël Nison
Antoine du Hamel @aduh95.bsky.social · 25/06/2026
Node.js 26.4.0 is out with package map support! Full changelog and download links available at nodejs.org/en/blog/rele...
nodejs.org
Node.js — Node.js 26.4.0 (Current)
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
0141
Maël Nison @mael.dev · 13/06/2026
It's been the case for companies working on ITAR deployments (only american citizen could deploy them), but generalizing that to the core offering is draconian. And now that this weapon has been used once, we can expect this administration to add it to their arsenal.
040
Maël Nison @mael.dev · 12/06/2026
Experimental package map support has been merged ! Now on to implement generation support into both Yarn and pnpm 🚀
1240
Maël Nison @mael.dev · 12/06/2026
I strongly suspect that's what's happening here as well, but I haven't found the source yet... github.com/yarnpkg/berr...
github.com
[Feature] Set a proper User-Agent header on outgoing HTTP request · Issue #7146 · yarnpkg/berry
I'd be willing to implement this feature (contributing guide) This feature is important to have in this repository; a contrib plugin wouldn't do Describe the user story As a sys admin, I want packa...
220
Maël Nison @mael.dev · 08/06/2026
I see Bluesky still doesn't support group DMs 🫠 I should arrive at Central Wednesday around 3pm - wanna have a teatime in a pub somewhere?
130
Maël Nison @mael.dev · 31/05/2026
Rest well, no rush 🙏
020
Maël Nison @mael.dev · 25/05/2026
I'll be at #jsnation EU in Amsterdam on June 11 to talk about @yarnpkg.dev's Rust rewrite! Met amazing people every year, will anyone be there as well? @acemarke.dev @danielroe.dev @tkdodo.eu @nicr.dev maybe?
180
Maël Nison @mael.dev · 21/05/2026
McDonald's France just made a reset of all passwords, so there's that 😄
100
Reposted by Maël Nison
Yarn @yarnpkg.dev · 19/05/2026
We just released the 4.15 branch 🎊 One important change is that npmMinimalAgeGate will now default to 1d for new projects.
092
Maël Nison @mael.dev · 14/05/2026
Because the verb "approve" feels explicit enough, but I welcome better names.
010
Maël Nison @mael.dev · 14/05/2026
Oh come on. Only if you also explicitly have `approvedGitRepos: ["**"]`, and at this point congratulations, you played yourself.
130
Maël Nison @mael.dev · 14/05/2026
Making `npmMinimalAgeGate: 1d` the default github.com/yarnpkg/berr...
github.com
Makes `npmMinimalAgeGate: 1d` the default by arcanis · Pull Request #7135 · yarnpkg/berry
What's the problem this PR addresses? The rate at which supply chain attacks occur is growing, and given that we can't rely on the npm registry for good practices it means we need to beco...
1225
Maël Nison @mael.dev · 13/05/2026
Let me tell you, "sustainability in OSS" is going to become a matter of mental health rather than money more than ever before. I fear the field will get toxic pretty fast as projects start competing entirely on social marketing antics 🫤
270
Maël Nison @mael.dev · 12/05/2026
For Yarn I'd suggest to use `npmMinimalAgeGate: 1d`. Unitless is allowed as well but better make it explicit!
000
Reposted by Maël Nison
Yarn @yarnpkg.dev · 12/05/2026
Reminder that Yarn lets you filter out fresh packages with `npmMinimalAgeGate` and it's a good idea to use it on your work repos!
161
Maël Nison @mael.dev · 12/05/2026
Pinning was only tangentially about security. Its main impact was for determinism. Security features should imo come from the npm registry, which is still unable to provide a basic two-auth publish workflow compatible with automations.
040
Maël Nison @mael.dev · 10/05/2026
Visuel du premier opus 😁
000
Maël Nison @mael.dev · 08/05/2026
That doesn't really mean anything - if you point Opus at the relevant files and ask to find the bug it'll find them, of course. Same for a human. It's conceivable that the model is particularly good by sheer virtue of not needing to know which files and interaction must be scrutinized.
110
Maël Nison @mael.dev · 29/04/2026
My personal view is that *npm* has been holding hostage the npm registry. I'm pretty sure Microsoft bought it only to avoid the catastrophic possibilities of the registry going down.
010
Maël Nison @mael.dev · 28/04/2026
After reading both Bravepaw books we went on to read the three books from the School of Secret Powers, by César Mallorquì! www.senscritique.com/livre/l_ecol...
senscritique.com
L'Ecole des pouvoirs secrets César Mallorqui - SensCritique
L'Ecole des pouvoirs secrets est un livre de César Mallorqui. Résumé · Un chat grincheux et un garçon liés par la magie... le début d'une série fantastique pour les plus...
000
Maël Nison @mael.dev · 24/04/2026
I never clone any repro project in a GH issue unless I personally know the person for this reason
120
Maël Nison @mael.dev · 20/04/2026
I'll be speaking at #JSNation to tell you the story of how we ported Yarn to Rust over the past year, and what we learned doing that (A LOT 😁) Check out my #JSNation badge: gitnation.com/badges/jsnat.... Register via the badge and watch the stream for FREE! See you on June 11 & 15.
gitnation.com
Check out my badge & claim your free JSNation 2026 remote ticket!
Join 10k engineers worldwide at JSNation 2026 and meet 50 top speakers at June 11 - 15, 2026
051
Maël Nison @mael.dev · 17/04/2026
I don't understand why GH doesn't provide "max age" / "max depth" / "checkpoint commit" mechanisms to make this more acceptable to high-velocity repositories.
030
Maël Nison @mael.dev · 17/04/2026
Is *anyone* using "Require branches to be up to date before merging" ? Always saw this setting as pretty harmful (N people update their branch in the hope to merge, only one can, all others wasted their CI time; rinse and repeat).
400
Reposted by Maël Nison
Yarn @yarnpkg.dev · 17/04/2026
We just released the 4.14 branch! 🎊 Two important security changes: - `enableScripts` now defaults to `false` (can be overridden on a per-package basis) - A new `approvedGitRepositories` setting should be used to tell Yarn which git repos are safe to pack.
1275
Maël Nison @mael.dev · 10/04/2026
I'm working on a feature called package maps for Node.js - it's leveraging everything I learned about package resolution these past six years, in a design that's both simple and flexible enough to be backward compatible with existing installs. I'm very excited about this! github.com/nodejs/node/...
github.com
loader: implement package maps by arcanis · Pull Request #62239 · nodejs/node
This PR adds a new --experimental-package-map=<path> flag letting Node.js resolve packages using a static JSON file instead of walking node_modules directories. node --experimental-package-ma...
13428
Maël Nison @mael.dev · 19/03/2026
I don't doubt you only use it for that, but the wording is way scarier; how come it can't be tuned down? > We use optional cookies to improve your experience on our websites, such as through social media connections, and to display personalized advertising based on your online activity
210
Maël Nison @mael.dev · 19/03/2026
Nope! But I saw this and it felt relevant: astral.sh/blog/openai
astral.sh
Astral to join OpenAI
Astral has entered into an agreement to join OpenAI as part of the Codex team.
030
Maël Nison @mael.dev · 19/03/2026
It should go without saying: Yarn isn't and will never be a company. My vision of sustainable OSS has always been that not only should the tool be free, but its maintainers as well.
6230
Maël Nison @mael.dev · 11/03/2026
Money is fungible so I'd assume they can fold every contribution and payout to obtain a single number for everyone, no need to even recurse, algorithmically speaking? 🤔
110
Maël Nison @mael.dev · 06/03/2026
👋
170
Maël Nison @mael.dev · 03/03/2026
I got my kid interested in his first fantasy book! We read one chapter every day 🥰 www.goodreads.com/book/show/21... by @liliwilkinson.bsky.social
goodreads.com
Bravepaw and the Heartstone of Alluria (Bravepaw #1)
An epic Tail of Adventure! Can one gallant mouse find t…
2110
Maël Nison @mael.dev · 27/02/2026
What, you don't?
Silicon Valley, party episode
140
Maël Nison @mael.dev · 26/02/2026
Perhaps a silly question - are multi-tenancy OSes legacy at this point? It feels like every machine nowadays only ever use a single user (perhaps a second for root). As far as I understand it even cloud deployments went away from unix's multi-user towards virtualization.
070
Maël Nison @mael.dev · 24/02/2026
I'm implementing task management primitives into Yarn. I think tools like Turbo having to parse the lockfile is sign enough that they should be native features. Scripts have always been too limiting for local development.
060
Maël Nison @mael.dev · 24/02/2026
I missed an amazing window after I got my first kid 😄 areyougoingexponential.rhys.dev/arcanis
areyougoingexponential.rhys.dev
@arcanis - areyougoingexponential.rhys.dev
@arcanis has 21,604 contributions on GitHub. Maël Nison's GitHub contributions are up 90% over the last 6 months.
120
Maël Nison @mael.dev · 20/02/2026
The state of GitHub's "Require status checks to pass before merging" section is incredible. Never saw what should be such a simple feature that simply couldn't work in two different companies. I get 500s just by searching for my jobs !
140
Maël Nison @mael.dev · 12/02/2026
We got stuff done while the US screamed "but the cookie banner" 🤭
020
Maël Nison @mael.dev · 02/02/2026
I always found it both nice and an incredible privacy nightmare. Can you imagine what groups like ICE would do with that?
100
Maël Nison @mael.dev · 30/01/2026
Yeah, JS is surprisingly efficient. Although Yarn's case we also have to deal with network overhead, even trickier to optimize!
120
Maël Nison @mael.dev · 30/01/2026
I'd tread carefully with this one. The arbitrary aspect makes me think it's the kind of thing that can turn toxic if not very carefully managed.
150
Maël Nison @mael.dev · 29/01/2026
I can now say it: Rust is really neat. I'm still on my learning journey, but I like many of its constructs. And I'm in love with pattern matching.
1170
Maël Nison @mael.dev · 28/01/2026
I added a compatibility layer to support Corepack when a special environment variable is set (yarn6.netlify.app/getting-star...), but it's a bit of a hack and once Yarn Switch is stable it'd be best to use it
yarn6.netlify.app
Installation
Yarn's in-depth installation guide.
010
Maël Nison @mael.dev · 28/01/2026
Outside of that it's just the codename for this new codebase, same as Berry was the codename for the TS one.
010
Maël Nison @mael.dev · 28/01/2026
That I'm a bit of a Stargate fan 😄 www.rdanderson.com/stargate/lex...
rdanderson.com
Richard Dean Anderson Website - Stargate SG-1 Lexicon - Zero Point Module
Stargate SG-1 Lexicon on the Richard Dean Anderson Website
110
Maël Nison @mael.dev · 28/01/2026
Got this one too. Are you using references and perhaps a pnpm-style symlinked install?
010
Maël Nison @mael.dev · 28/01/2026
Noticed the amazing website? It's built with @astro.build from the ground up thanks to the help of the fine folks at luckymedia.dev, and the GLSL mad skills of shadertoy.com/user/Kali 😊
1120