Maël Nison @mael.dev · 19/08/2026We have some support in 6.x for node.js and python releases. I'd like to eventually have support for arbitrary tools, if you have ideas I'd love to review! 111
Reposted by Maël NisonSimon Boudrias @sboudrias.bsky.social · 04/08/2026We deleted a year of AI context files—and our evals got better. On The AI Native Dev podcast, I share what changed as Datadog scaled AI coding tools to 1,000+ engineers. tessl.co/sb6 #AIagents #DevEx 011
Reposted by Maël NisonAntoine du Hamel @aduh95.bsky.social · 25/06/2026Node.js 26.4.0 is out with package map support! Full changelog and download links available at nodejs.org/en/blog/rele...nodejs.orgNode.js — Node.js 26.4.0 (Current)Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts. 0141
Maël Nison @mael.dev · 13/06/2026It's been the case for companies working on ITAR deployments (only american citizen could deploy them), but generalizing that to the core offering is draconian. And now that this weapon has been used once, we can expect this administration to add it to their arsenal. 040
Maël Nison @mael.dev · 12/06/2026Experimental package map support has been merged ! Now on to implement generation support into both Yarn and pnpm 🚀 1240
Maël Nison @mael.dev · 12/06/2026I strongly suspect that's what's happening here as well, but I haven't found the source yet... github.com/yarnpkg/berr...github.com[Feature] Set a proper User-Agent header on outgoing HTTP request · Issue #7146 · yarnpkg/berryI'd be willing to implement this feature (contributing guide) This feature is important to have in this repository; a contrib plugin wouldn't do Describe the user story As a sys admin, I want packa... 220
Maël Nison @mael.dev · 08/06/2026I see Bluesky still doesn't support group DMs 🫠 I should arrive at Central Wednesday around 3pm - wanna have a teatime in a pub somewhere? 130
Maël Nison @mael.dev · 25/05/2026I'll be at #jsnation EU in Amsterdam on June 11 to talk about @yarnpkg.dev's Rust rewrite! Met amazing people every year, will anyone be there as well? @acemarke.dev @danielroe.dev @tkdodo.eu @nicr.dev maybe? 180
Maël Nison @mael.dev · 21/05/2026McDonald's France just made a reset of all passwords, so there's that 😄 100
Reposted by Maël NisonYarn @yarnpkg.dev · 19/05/2026We just released the 4.15 branch 🎊 One important change is that npmMinimalAgeGate will now default to 1d for new projects. 092
Maël Nison @mael.dev · 14/05/2026Because the verb "approve" feels explicit enough, but I welcome better names. 010
Maël Nison @mael.dev · 14/05/2026Oh come on. Only if you also explicitly have `approvedGitRepos: ["**"]`, and at this point congratulations, you played yourself. 130
Maël Nison @mael.dev · 14/05/2026Making `npmMinimalAgeGate: 1d` the default github.com/yarnpkg/berr...github.comMakes `npmMinimalAgeGate: 1d` the default by arcanis · Pull Request #7135 · yarnpkg/berryWhat's the problem this PR addresses? The rate at which supply chain attacks occur is growing, and given that we can't rely on the npm registry for good practices it means we need to beco... 1225
Maël Nison @mael.dev · 13/05/2026Let me tell you, "sustainability in OSS" is going to become a matter of mental health rather than money more than ever before. I fear the field will get toxic pretty fast as projects start competing entirely on social marketing antics 🫤 270
Maël Nison @mael.dev · 12/05/2026For Yarn I'd suggest to use `npmMinimalAgeGate: 1d`. Unitless is allowed as well but better make it explicit! 000
Reposted by Maël NisonYarn @yarnpkg.dev · 12/05/2026Reminder that Yarn lets you filter out fresh packages with `npmMinimalAgeGate` and it's a good idea to use it on your work repos! 161
Maël Nison @mael.dev · 12/05/2026Pinning was only tangentially about security. Its main impact was for determinism. Security features should imo come from the npm registry, which is still unable to provide a basic two-auth publish workflow compatible with automations. 040
Maël Nison @mael.dev · 08/05/2026That doesn't really mean anything - if you point Opus at the relevant files and ask to find the bug it'll find them, of course. Same for a human. It's conceivable that the model is particularly good by sheer virtue of not needing to know which files and interaction must be scrutinized. 110
Maël Nison @mael.dev · 29/04/2026My personal view is that *npm* has been holding hostage the npm registry. I'm pretty sure Microsoft bought it only to avoid the catastrophic possibilities of the registry going down. 010
Maël Nison @mael.dev · 28/04/2026After reading both Bravepaw books we went on to read the three books from the School of Secret Powers, by César Mallorquì! www.senscritique.com/livre/l_ecol...senscritique.comL'Ecole des pouvoirs secrets César Mallorqui - SensCritiqueL'Ecole des pouvoirs secrets est un livre de César Mallorqui. Résumé · Un chat grincheux et un garçon liés par la magie... le début d'une série fantastique pour les plus... 000
Maël Nison @mael.dev · 24/04/2026I never clone any repro project in a GH issue unless I personally know the person for this reason 120
Maël Nison @mael.dev · 20/04/2026I'll be speaking at #JSNation to tell you the story of how we ported Yarn to Rust over the past year, and what we learned doing that (A LOT 😁) Check out my #JSNation badge: gitnation.com/badges/jsnat.... Register via the badge and watch the stream for FREE! See you on June 11 & 15.gitnation.comCheck out my badge & claim your free JSNation 2026 remote ticket!Join 10k engineers worldwide at JSNation 2026 and meet 50 top speakers at June 11 - 15, 2026 051
Maël Nison @mael.dev · 17/04/2026I don't understand why GH doesn't provide "max age" / "max depth" / "checkpoint commit" mechanisms to make this more acceptable to high-velocity repositories. 030
Maël Nison @mael.dev · 17/04/2026Is *anyone* using "Require branches to be up to date before merging" ? Always saw this setting as pretty harmful (N people update their branch in the hope to merge, only one can, all others wasted their CI time; rinse and repeat). 400
Reposted by Maël NisonYarn @yarnpkg.dev · 17/04/2026We just released the 4.14 branch! 🎊 Two important security changes: - `enableScripts` now defaults to `false` (can be overridden on a per-package basis) - A new `approvedGitRepositories` setting should be used to tell Yarn which git repos are safe to pack. 1275
Maël Nison @mael.dev · 10/04/2026I'm working on a feature called package maps for Node.js - it's leveraging everything I learned about package resolution these past six years, in a design that's both simple and flexible enough to be backward compatible with existing installs. I'm very excited about this! github.com/nodejs/node/...github.comloader: implement package maps by arcanis · Pull Request #62239 · nodejs/nodeThis PR adds a new --experimental-package-map=<path> flag letting Node.js resolve packages using a static JSON file instead of walking node_modules directories. node --experimental-package-ma... 13428
Maël Nison @mael.dev · 19/03/2026I don't doubt you only use it for that, but the wording is way scarier; how come it can't be tuned down? > We use optional cookies to improve your experience on our websites, such as through social media connections, and to display personalized advertising based on your online activity 210
Maël Nison @mael.dev · 19/03/2026Nope! But I saw this and it felt relevant: astral.sh/blog/openaiastral.shAstral to join OpenAIAstral has entered into an agreement to join OpenAI as part of the Codex team. 030
Maël Nison @mael.dev · 19/03/2026It should go without saying: Yarn isn't and will never be a company. My vision of sustainable OSS has always been that not only should the tool be free, but its maintainers as well. 6230
Maël Nison @mael.dev · 11/03/2026Money is fungible so I'd assume they can fold every contribution and payout to obtain a single number for everyone, no need to even recurse, algorithmically speaking? 🤔 110
Maël Nison @mael.dev · 03/03/2026I got my kid interested in his first fantasy book! We read one chapter every day 🥰 www.goodreads.com/book/show/21... by @liliwilkinson.bsky.socialgoodreads.comBravepaw and the Heartstone of Alluria (Bravepaw #1)An epic Tail of Adventure! Can one gallant mouse find t… 2110
Maël Nison @mael.dev · 26/02/2026Perhaps a silly question - are multi-tenancy OSes legacy at this point? It feels like every machine nowadays only ever use a single user (perhaps a second for root). As far as I understand it even cloud deployments went away from unix's multi-user towards virtualization. 070
Maël Nison @mael.dev · 24/02/2026I'm implementing task management primitives into Yarn. I think tools like Turbo having to parse the lockfile is sign enough that they should be native features. Scripts have always been too limiting for local development. 060
Maël Nison @mael.dev · 24/02/2026I missed an amazing window after I got my first kid 😄 areyougoingexponential.rhys.dev/arcanisareyougoingexponential.rhys.dev@arcanis - areyougoingexponential.rhys.dev@arcanis has 21,604 contributions on GitHub. Maël Nison's GitHub contributions are up 90% over the last 6 months. 120
Maël Nison @mael.dev · 20/02/2026The state of GitHub's "Require status checks to pass before merging" section is incredible. Never saw what should be such a simple feature that simply couldn't work in two different companies. I get 500s just by searching for my jobs ! 140
Maël Nison @mael.dev · 12/02/2026We got stuff done while the US screamed "but the cookie banner" 🤭 020
Maël Nison @mael.dev · 02/02/2026I always found it both nice and an incredible privacy nightmare. Can you imagine what groups like ICE would do with that? 100
Maël Nison @mael.dev · 30/01/2026Yeah, JS is surprisingly efficient. Although Yarn's case we also have to deal with network overhead, even trickier to optimize! 120
Maël Nison @mael.dev · 30/01/2026I'd tread carefully with this one. The arbitrary aspect makes me think it's the kind of thing that can turn toxic if not very carefully managed. 150
Maël Nison @mael.dev · 29/01/2026I can now say it: Rust is really neat. I'm still on my learning journey, but I like many of its constructs. And I'm in love with pattern matching. 1170
Maël Nison @mael.dev · 28/01/2026I added a compatibility layer to support Corepack when a special environment variable is set (yarn6.netlify.app/getting-star...), but it's a bit of a hack and once Yarn Switch is stable it'd be best to use ityarn6.netlify.appInstallationYarn's in-depth installation guide. 010
Maël Nison @mael.dev · 28/01/2026Outside of that it's just the codename for this new codebase, same as Berry was the codename for the TS one. 010
Maël Nison @mael.dev · 28/01/2026That I'm a bit of a Stargate fan 😄 www.rdanderson.com/stargate/lex...rdanderson.comRichard Dean Anderson Website - Stargate SG-1 Lexicon - Zero Point ModuleStargate SG-1 Lexicon on the Richard Dean Anderson Website 110
Maël Nison @mael.dev · 28/01/2026Got this one too. Are you using references and perhaps a pnpm-style symlinked install? 010
Maël Nison @mael.dev · 28/01/2026Noticed the amazing website? It's built with @astro.build from the ground up thanks to the help of the fine folks at luckymedia.dev, and the GLSL mad skills of shadertoy.com/user/Kali 😊 1120