Sign in

Munawwar Firoz

@munawwar.bsky.social
153 followers 104 following 920 posts

Web developer - HTML / CSS / JS, node.js, preact, vanilla JS, serverless, serverful, databases, IaC github.com/Munawwar | codepasta.com At Carriyo, Dubai, UAE

PostsRepliesMedia
Munawwar Firoz @munawwar.bsky.social · 30/08/2026
I didn't announce here that I packaged my shadow preserving algorithm into a paid app: PackshotPanda (dot com)
100
Munawwar Firoz @munawwar.bsky.social · 25/08/2026
Most background removal tools don't retain natural shadow. I figured out how to retain it. And also how to align them shoes to be perfectly 10% away from the bottom,left,right edges within a 2048x2048 canvas (allowing the shadows to occupy that 10% margin)
000
Munawwar Firoz @munawwar.bsky.social · 27/07/2026
Previously if I was tired and still had work pending I forced myself to sit on my chair and focus on the work. Now I can lie down and talk to my phone.
000
Munawwar Firoz @munawwar.bsky.social · 22/07/2026
Was looking at toggle switch designs and landed on a shop that sells physical toggle switches as fidget toys. It looks soo good!
https://kickup-edc.com/products/slider-3-0-color-edition?variant=48033344586045
000
Munawwar Firoz @munawwar.bsky.social · 08/07/2026
Pepper is mildly hot! Unless it's chili pepper. github.com/Munawwar/Pep...
010
Munawwar Firoz @munawwar.bsky.social · 04/07/2026
A tiny island nation, Cape Verde, made Argentina sweat! One of the best matches so far.
030
Munawwar Firoz @munawwar.bsky.social · 27/06/2026
DynamoDB GUI now has desktop app just to support AWS SSO github.com/Munawwar/Dyn...
github.com
GitHub - Munawwar/DynamoDb-GUI-Client: 💡 DynamoDb GUI Client (Web, Desktop)
💡 DynamoDb GUI Client (Web, Desktop). Contribute to Munawwar/DynamoDb-GUI-Client development by creating an account on GitHub.
000
Munawwar Firoz @munawwar.bsky.social · 27/06/2026
ws-affected can now run root package scripts with --run-root in parallel with workspace scripts npmjs.com/package/ws-a...
110
Munawwar Firoz @munawwar.bsky.social · 22/06/2026
Pepper v0.3 component rendering work in-progress. Right now updating something at lower level of component tree bubbles changes to the top. Might make this more efficient.
210
Munawwar Firoz @munawwar.bsky.social · 14/06/2026
If this Fable ban gets reversed by Monday I'd believe it was staged all along and the marketing stunt turned out great
000
Munawwar Firoz @munawwar.bsky.social · 14/06/2026
Haircuts are such a waste of time. Need to go bald like the tech ceos
000
Munawwar Firoz @munawwar.bsky.social · 06/06/2026
VSCode extension for the nimble-html fork
210
Munawwar Firoz @munawwar.bsky.social · 06/06/2026
I've changed colors in 5 years. I changed my sleep schedule from being a night owl and it's visible here. cronotype.vercel.app/munawwar?his...
010
Munawwar Firoz @munawwar.bsky.social · 05/06/2026
New version of QuickJS engine dropped and it supports ES2025. Portable executable (APE) is now at 3.3 MB.
000
Munawwar Firoz @munawwar.bsky.social · 04/06/2026
Didn't notice that KDE 6+ looks bit more modern than the 90s design it used to have 👀
000
Reposted by Munawwar Firoz
pilcrow @pilcrowonpaper.com · 03/06/2026
Announcing my auth book! A completely free online resource on implementing auth with fully-featured examples Over 10,000 words right now and I still have plenty of things to write about auth.pilcrowonpaper.com
Authentication methods
Sessions
Auth sessions
Email addresses
Passwords
Browser client-side storage
Cross-site request forgery (CSRF)
Argon2
Bcrypt
Email address verification codes
Email code authentication
Passkeys
Web Authentication API (WebAuthn)
WebAuthn authenticator data
WebAuthn CBOR encoding
WebAuthn client data
Passkey registration
Passkey authentication
Elliptic Curve Digitial Signature Algorithm (ECDSA)
RSA signature scheme
Edwards Curve Digital Signature Algorithm (EdDSA)
720941
Munawwar Firoz @munawwar.bsky.social · 02/06/2026
/goal prove P = NP If you don't know what to do with your tokens
000
Munawwar Firoz @munawwar.bsky.social · 01/06/2026
Tagged template literal (TTL) based rendering library can handle spread syntax `...${props}`. I think it can have react-like `children` / slots idea too. Will be trying to (dis)prove the idea soon. Though the type checking story is weaker than what JSX can give.
130
Munawwar Firoz @munawwar.bsky.social · 01/06/2026
Hot take: I prefer we named our divs instead of relying on react dev tools to know where a utility class essay came from
110
Munawwar Firoz @munawwar.bsky.social · 29/05/2026
Bsky just doesn't load sometimes. Does it happen to anyone else?
000
Munawwar Firoz @munawwar.bsky.social · 25/05/2026
Trying out new terminal based on ghostty: github.com/am-will/limux I keep losing my tabs and split layouts, so this remembers it (even after restart)
100
Munawwar Firoz @munawwar.bsky.social · 24/05/2026
My fork of nimble-html has - (pseudo) hydration - dom-reconciler for lists (based off udomdiff code) - ...${prop} spread syntax - types safety isn't possible directly with TS syntax, so .. it now has TS server plugin, CLI linter tool, vscode extension (for squiggly + syntax highlight)
140
Munawwar Firoz @munawwar.bsky.social · 21/05/2026
I like DOM template API spec so far. The direction is awesome.
031
Munawwar Firoz @munawwar.bsky.social · 21/05/2026
This day is a sad day
100
Munawwar Firoz @munawwar.bsky.social · 21/05/2026
I think just remove npm publishing from CI and publish from your machine (w/ 2FA enabled).
010
Munawwar Firoz @munawwar.bsky.social · 20/05/2026
With the github attack, I switched off auto update of vscode extensions. And going to move to a editor that doesn't need so many 3 party plugins. Which one folks? Zed?
100
Munawwar Firoz @munawwar.bsky.social · 20/05/2026
2026 is the year we unplug from the internet because of constant attacks
000
Reposted by Munawwar Firoz
Barry Pollard @tunetheweb.com · 19/05/2026
So here's an interesting little thing or 2 @nomster.bsky.social , @foolip.org , and myself have been cooking up—along with lots of help from others!: developer.chrome.com/blog/declara... This could lead to some VERY interesting changes in how we write web pages. Would love to hear your thoughts!
developer.chrome.com
Declarative partial updates  |  Blog  |  Chrome for Developers
Learn about new out-of-order streaming capabilities and the renewed HTML insertion and streaming methods available for testing from Chrome 148
98326
Munawwar Firoz @munawwar.bsky.social · 19/05/2026
Does anyone care about long sessions that has gone through multiple compactions anymore?
000
Munawwar Firoz @munawwar.bsky.social · 16/05/2026
Playing with nimble-html. Added (naive) hydration logic: github.com/Munawwar/nim... It doesn't aim to reduce DOM creation, but only to preserve form element states. So no CPU/Mem savings, but whatever user typed before hydration is preserved. Trade-off for lesser LoC. cc @joe.trusktr.io
github.com
GitHub - Munawwar/nimble-html at pseudo-hydration
A light-weight `html` tagged template string function for writing declarative-reactive web apps. Zero dependencies. - Munawwar/nimble-html
140
Munawwar Firoz @munawwar.bsky.social · 15/05/2026
GM again! Start the day by upgrading Next.js yet again!
121
Munawwar Firoz @munawwar.bsky.social · 13/05/2026
Library maintainers check this for CI: github.com/step-securit... (I am not affiliated with the company .. just sharing stuff)
github.com
GitHub - step-security/harden-runner: Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on tho...
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in re...
000
Munawwar Firoz @munawwar.bsky.social · 13/05/2026
I think all SSR code has to be run in a sandbox on server so that any client-side library supply chain attack won't be able to mess with the server. I understand it's breaking the point of the original idea of "isomorphic code" but that era is coming to and end.
000
Munawwar Firoz @munawwar.bsky.social · 12/05/2026
I am learning how to contain such a thing as a maintainer. Learning about "Step Security Harden Runner", learning about GitHub cache disable, socket SAST, different privileges in CI stages. Also as consumer - lavamoat/allow-scripts, pnpms defaults, socket sfw.
000
Munawwar Firoz @munawwar.bsky.social · 08/05/2026
GM! Start the day by upgrading Next.js yet again.
130
Munawwar Firoz @munawwar.bsky.social · 07/05/2026
Used to listen to music like this in my teens / 20s. Rediscovering them again. www.youtube.com/watch?v=tcwj...
youtube.com
Solarstone - Seven Cities (Armin van Buuren Remix) HD
YouTube video by Tom Finney
000
Munawwar Firoz @munawwar.bsky.social · 05/05/2026
Guys, CC Pocket! One of few projects that shows local (linux) Codex sessions on a native (android) app github.com/K9i-0/ccpocket
github.com
GitHub - K9i-0/ccpocket: Mobile client for Codex and Claude — control coding agents from your phone via WebSocket bridge
Mobile client for Codex and Claude — control coding agents from your phone via WebSocket bridge - K9i-0/ccpocket
100
Reposted by Munawwar Firoz
Mateusz Krzeszowiak @krzksz.bsky.social · 04/05/2026
We switched Speculation Rules on Shopify storefronts from conservative to moderate eagerness. Here's how that went: performance.shopify.com/blogs/blog/f...
performance.shopify.com
Faster storefront navigations with moderate speculation rules
We upgraded Speculation Rules to moderate eagerness on all Liquid storefronts. Desktop navigations are now 285ms faster at the median, with near-zero TTFB.
065
Munawwar Firoz @munawwar.bsky.social · 04/05/2026
I can say for myself (am not a beginner), I use AI to personalize my learning. I buy books to counter the issue of topics that I didnt think of, but I throw it into a LLM to figure out important sections to read. I don't know what I am missing out. Impatience is terrible, and am trying to be better
000
Munawwar Firoz @munawwar.bsky.social · 02/05/2026
I am always building a framework. I never completed one.
050
Munawwar Firoz @munawwar.bsky.social · 02/05/2026
Every reply I do here is getting spam replies. Not sure where it's coming from. I am going to block any non-tech or inactive followers.
000
Munawwar Firoz @munawwar.bsky.social · 02/05/2026
AWS Lambda Node 20 EOL. Calmly updated architect (arc.codes) from 10.x -> 12.x and node version 20 -> 24, did a quick local test and deployed. All done in 10 minutes. @brianleroux.bsky.social it's standing the test of time!
010
Munawwar Firoz @munawwar.bsky.social · 30/04/2026
How I did long-lived caching in my "no build" websites www.youtube.com/watch?v=R7-M...
youtube.com
"No build" assets fingerprinting approach
YouTube video by Munawwar Firoz
010
Munawwar Firoz @munawwar.bsky.social · 29/04/2026
So QuickJS is viable for SSR of e-commerce pages if the JS FW constructs strings directly without vdom:
231
Munawwar Firoz @munawwar.bsky.social · 19/04/2026
Preact Datefield PoC. Check it out. UX feedback welcome. * Code is too vibed. Don't judge me yet lol. Once the UX is decided I intend to rewrite it properly. 1. Demo: munawwar.github.io/preact-datef... 2. Code: github.com/Munawwar/pre...
munawwar.github.io
010
Munawwar Firoz @munawwar.bsky.social · 18/04/2026
TIL fnv1a32 + fmix32. It's shorter implementation than the hash function I used in hrw-hash (npm)
000
Munawwar Firoz @munawwar.bsky.social · 15/04/2026
Bsky needs feature to remove followers. I want to remove any account that looks like a bot / spam account.
210
Munawwar Firoz @munawwar.bsky.social · 10/04/2026
Is "The year of Linux desktops" finally here?
000
Munawwar Firoz @munawwar.bsky.social · 09/04/2026
Ah, another RSC CVE dropped
media.tenor.com
a group of cartoon characters are standing in front of a christmas tree and looking surprised .
ALT: a group of cartoon characters are standing in front of a christmas tree and looking surprised .
030
Munawwar Firoz @munawwar.bsky.social · 09/04/2026
Linux Mint works beautifully on the old mac mini 2011
020