Evert Pot (@evertp) header
Evert Pot (@evertp) profile picture

Evert Pot

@evertp

Works at @vltpkg Find me here: Mastadon: https://teapawt.org/t.co/RO721W1aY0 bsky: https://teapawt.org/t.co/CYmZB1jiQS

 多伦多
evertpot.com/
Joined September 2007
  • Tweets10.7K
  • Following676
  • Followers1.5K
If I stopped following you on Twitter it might mean I've already found you on Mastadon and I'm slowly shutting down here!
1
2
1,126
Fun fact about the NPM replication feed. If you just follow the feed to get updates for ever package, you will miss packages because they retroactively insert changes in the *past* of the feed.
1
1
150
more replies
People have been reporting this since 2025 but no official response: github.com/orgs/community/di…
`npm replication API` changes and migration guide · community · Discussion #152515

`npm replication API` changes and migration guide · community · Discussion #152515

Overview As part of our ongoing improvements, we are making changes to our replication API services. This is to ensure availability and performance of our feeds. Moving forward, only a limited set ...

github.com
1
36
So to accurately replicate NPM, it's not enough to follow the 'sequential' feed, you also have to go back later to see if you missed anything. 🫠
26
Years ago I found out that there was an open source version of Sim City called 'Micropolis'. Ever since then I wanted to make a MMO version on the web. I spent a ton of hours on this but the project was too big in the end and I gave up on it.
2
1
5
174
more replies
If it sounds like fun, go take a look here: globalcity.evertpot.com
1
70
Woah 190 people took a look today apparently and 62 areas were claimed. 🎉
1
32
Evert Pot retweeted
Kevin (@linguinelabs) profile picture
Kevin
@linguinelabsSep 29
If Canada made america.gov it would be called cgc-cms-srv136.services.cra-…
146
467
47
10,450
430,541
I made a Markdown-like format for forms/surveys. Been sitting on this idea for a few years. Feedback welcome! askdown.dev/
1
4
12
349
It's both a hosted Google Forms replacement and a format with open source reference.
1
70
Evert Pot retweeted
cody (@codybrouwers) profile picture
cody
@codybrouwersSep 22
Some more data for CI cold installs after switching to vlt's registry from npm. 35% faster at p90!
Image from cody (@codybrouwers)
cody (@codybrouwers) profile picturecody
@codybrouwersSep 10
Switched to @vltpkg registry from npm and saw some nice improvements in cold installs and package metadata size
Image from cody (@codybrouwers)
4
5
3
9
3,154
At work I've been working on a safer, faster NPM mirror and place for teams to publish private packages. After roughly 8 months we're done! It's been a ride. vlt.io #vlt #npm
Home | vlt /vōlt/

Home | vlt /vōlt/

Package registries for teams that move fast

vlt.io
Darcy Clarke (@darcy) profile pictureDarcy Clarke
@darcyAug 4
Excited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA! A drop-in npm replacement, built so nothing runs on your machine just because you typed install. → faster delivery → malware blocking at the registry layer → graph-native querying
1
1
7
367
Evert Pot retweeted
Darcy Clarke (@darcy) profile picture
Darcy Clarke
@darcyAug 4
Excited to share vlt 1.0 along with our hosted registries & ecosystem mirrors now GA! A drop-in npm replacement, built so nothing runs on your machine just because you typed install. → faster delivery → malware blocking at the registry layer → graph-native querying – at Toronto, Ontario
21
35
16
142
40,801
Wow accidentally posted here instead of mastodon/bsky because I had a tab open and wasn't looking at the URL.
1
56
Woah, someone wrote an article about my homelab project xda-developers.com/i-built-a…
I built a Windows 3.1 dashboard for my homelab, and it's the most fun I've had self-hosting

I built a Windows 3.1 dashboard for my homelab, and it's the most fun I've had self-hosting

Homelab for Workgroups turns your dashboard into a nostalgic operating system, and that's exactly why I use it

xda-developers.com
3
94
Evert Pot retweeted
Darcy Clarke (@darcy) profile picture
Darcy Clarke
@darcyApr 1
tldr; if you used @vltpkg as your package manager, then you were protected the minute @SocketSecurity flagged the malicious packages in the `axios` attack yesterday. The best time to switch your package manager was 48hrs ago, the next best time is right now. More below: blog.vlt.sh/blog/vlt-build – at Toronto, Ontario
Introducing Phased Package Installations | vlt /vōlt/

Introducing Phased Package Installations | vlt /vōlt/

When you run vlt install, packages are downloaded and extracted to node_modules, but no lifecycle scripts execute.

vlt.io
Socket (@SocketSecurity) profile pictureSocket
@SocketSecurityApr 1
🧨 Axios only needed to be resolved somewhere in your dependency graph to affect you. Semver + transitive deps + runtime installs = hidden blast radius. If you only checked your project’s lockfile, you may still not know. socket.dev/blog/hidden-blast… #nodejs
The Hidden Blast Radius of the Axios Compromise

The Hidden Blast Radius of the Axios Compromise

The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

socket.dev
3
14
45
12,260
I built a browser-based Gopher client / proxy in Node.js. Go check it out! burrow.din.gy/
Image from Evert Pot (@evertp)
1
94
Yesterday we saw the most _new_ NPM packages being released in the last 12 months, at 2804 packages. Pretty steady upward trajectory here, unlike we've ever seen. This graph is spiky because it's daily data and weekends are lower.
Graph showing daily new packages being uploaded to NPM for the last 12 months and showing a lot of growth since the start of 2026.

ALT Graph showing daily new packages being uploaded to NPM for the last 12 months and showing a lot of growth since the start of 2026.

1
2
102
"There is nothing special about Elon Musk, Sam Altman, or Mark Zuckerberg. Accepting that requires you to also accept that the world itself is not one that rewards the remarkable, or the brilliant, or the truly incredible, but those who are able to take advantage of opportunities, which in turn leads to the horrible truth that those who often have the most opportunities are some of the most boring and privileged people alive." -@EdZitron, You Can't Make Friends With The Rockstars wheresyoured.at/rockstars/
You Can't Make Friends With The Rockstars

You Can't Make Friends With The Rockstars

You cannot make friends with the rock stars...if you're going to be a true journalist, you know, a rock journalist. First, you never get paid much, but you will get free records from the record...

wheresyoured.at
99
651
70
2,685
269,843
Load more