lucacasonato

7 ms·

1.
by lucacasonato 8mo ago
It will only replace the secret in headers
2.
by lucacasonato 8mo ago
We honestly should have just linked to oracle.com instead of evil.com
3.
by lucacasonato 8mo ago
It’s a cloud service - so you can call out to it from anywhere you want. Just don’t ship your credentials in the app itself, and instead authenticate via a server you control.
4.
by lucacasonato 8mo ago
We run or own infrastructure for this (and everything else). The link was just an illustrative example
5.
by lucacasonato 8mo ago
I can confirm Ryan is a real human :)
6.
by lucacasonato 8mo ago
We'll increase the lifetime in the next weeks - just some tech internally that needs to be adjusted first.
7.
by lucacasonato 1y ago
Happy to answer any questions :)
8.
by lucacasonato 2y ago
Deno is NPM compatible
9.
by lucacasonato 2y ago
JavaScript is the world's most popular programming language. https://www.statista.com/statistics/793628/worldwide-develop...
10.
by lucacasonato 2y ago
You clearly have not read the post :D
11.
by lucacasonato 2y ago
It is practically abandoned, but unless the USPTO or a US court says that that is so, it is not legally abandoned. That is a problem because the confusion and insecurity about the trademark remains until it is legally considered abandoned.
12.
by lucacasonato 2y ago
like 90% of the DMA is just this haha
13.
by lucacasonato 2y ago
Except that is not what Google is doing. They have exclusive access to the one line that is preinstalled for all houses. Only they can use it. And if you want a different provider, you can't use that same line. You have to pay for the
14.
by lucacasonato 2y ago
I agree it is very useful! This is also how I discovered this in the first place. But that is not at all my point. The point is that google.com web properties have access to an API and a browser capability that is not available to it's
15.
by lucacasonato 2y ago
No, this is used by Google Meet right now. Open the "Troubleshooting" panel in meet.google.com in Chrome, and you'll see live system wide CPU usage reporting :)
16.
by lucacasonato 2y ago
We do not use GKE. The Google infra that we do use in this hot path (GFE via Google Global External Load Balancers, and Colossus via Google Cloud Storage) is the same infra that powers serving static assets for Google internal services.
17.
by lucacasonato 2y ago
The SLO (objective) is an uptime of 100%. That means that we have no error budget to use for scheduled maintenance or anything of that sort. This means that we can not use software in this hot path that would require scheduled maintenance (
18.
by lucacasonato 2y ago
It uses Google Cloud Tasks
19.
by lucacasonato 2y ago
Hey hey, post author here - happy to answer your questions!
20.
by lucacasonato 2y ago
So the reason we do this - and I should have mentioned this in the post - is that we explicitly do not want to dog food here. Because JSR is the package registry, if it goes down, and we can not pull packages from the registry during deploy
21.
by lucacasonato 3y ago
CORRECTION: An employee of GitHub has reached out to me to inform me that there are more than 2 engineers people working on npm full time, including multiple full time support staff and full time staff to review possible malware. The engine
22.
by lucacasonato 3y ago
Doesn't this get us right back to where we started from? Where you don't want users to be able to register arbitrary names :)
23.
by lucacasonato 3y ago
Both `.d.ts` and `.js` files can be created without understanding the TS type system (this is what JSR does). Creating both of those is just a TS syntax transform - one that is highly stable (esbuild and friends all do it already).
24.
by lucacasonato 3y ago
- `isolatedModules: true` is required - Decorators: standard spec decorators only - JSX: tsconfig options are lifted into JSX pragma comments on publish (configuration goes into code so that consumers can emit based on these options still)
25.
by lucacasonato 3y ago
PRs welcome: https://github.com/jsr-io/jsr
26.
by lucacasonato 3y ago
How do you deal with individuals that may not have a domain? What do you tie their scope to?
27.
by lucacasonato 3y ago
> Exposes these libs as proper ES6 modules. We don't do this natively (yet?), but esm.sh supports JSR alreay: https://twitter.com/jexia_/status/1762516242626416750
28.
by lucacasonato 3y ago
> This sounds like another building service I don't control. There's already too much magic in publishing transpiled TypeScript packages but at least the current tools let me control exactly what artifacts get pushed out. For t
29.
by lucacasonato 3y ago
Look at the comment under the comment you mention - those issues are about the TS type system, NOT the TS syntax. TS syntax is highly stable, and is the only thing JSR relies on :)
30.
by lucacasonato 3y ago
What happens if the domain registration expires? Scope takeover?

More ›